Cybersecurity articles tagged #Unauthenticated Access on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/mikrotik-routeros-unauthenticated-ssh-exploit-critical-advisoryhttps://runtimerebel.com/blog/mikrotik-routeros-unauthenticated-ssh-exploit-critical-advisoryAttackers are exploiting a critical vulnerability in MikroTik RouterOS via internet-exposed SSH to gain full administrative control without authentication.Sun, 06 Sep 2026 11:50:33 GMTUnauthenticated AccessRemote Code ExecutionZero-DayMikroTikRouterOShttps://runtimerebel.com/blog/nvidia-nemoclaw-weakness-allows-ai-model-poisoning-via-ollamahttps://runtimerebel.com/blog/nvidia-nemoclaw-weakness-allows-ai-model-poisoning-via-ollamaOasis Security uncovered a weakness in NVIDIA NemoClaw allowing unauthenticated AI model poisoning through a malicious webpage exploiting Ollama.Tue, 25 Aug 2026 16:25:52 GMTAI SecurityUnauthenticated AccessNVIDIA NemoClawOllamaDNS Rebindinghttps://runtimerebel.com/blog/gitlab-graphql-flaw-cve-2026-19478-unauthenticated-project-deletionhttps://runtimerebel.com/blog/gitlab-graphql-flaw-cve-2026-19478-unauthenticated-project-deletionGitLab addresses a critical GraphQL flaw (CVE-2026-19478) allowing unauthenticated attackers to delete public projects and user data on self-managed CE/EE instances.Tue, 18 Aug 2026 00:39:43 GMTUnauthenticated AccessCVE-2026-19478CVE-2026-19650GitLabGraphQLhttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accesshttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accessMetabase zero-day vulnerability (CVSS 10.0) actively exploited, allowing unauthenticated remote attackers to gain admin access and steal data.Sat, 08 Aug 2026 08:28:26 GMTZero-DaySQL InjectionUnauthenticated AccessData BreachMetabasehttps://runtimerebel.com/blog/mongobleed-unauthenticated-credential-theft-via-server-memoryhttps://runtimerebel.com/blog/mongobleed-unauthenticated-credential-theft-via-server-memoryAnalysis of MongoBleed, a critical vulnerability enabling unauthenticated credential and session token extraction from server memory, highlighting attack surface…Wed, 17 Jun 2026 13:27:52 GMTMongoBleedAttack Surface ManagementCredential TheftSession HijackingUnauthenticated AccessMemory DisclosureMongoDBhttps://runtimerebel.com/blog/servicenow-data-exposure-via-unauthenticated-api-flawhttps://runtimerebel.com/blog/servicenow-data-exposure-via-unauthenticated-api-flawServiceNow warns customers about a security incident after attackers exploited an unauthenticated API vulnerability to access and query customer instance data.Wed, 10 Jun 2026 01:03:52 GMTServiceNowAPI SecurityData ExposureUnauthenticated AccessCloud Security Incidenthttps://runtimerebel.com/blog/oracle-april-2026-cpu-481-patches-for-unauthenticated-flawshttps://runtimerebel.com/blog/oracle-april-2026-cpu-481-patches-for-unauthenticated-flawsOracle's April 2026 Critical Patch Update addresses 481 vulnerabilities across 28 product families, including 300+ unauthenticated remote exploits.Wed, 22 Apr 2026 08:44:10 GMTOracleCpu April 2026Patch ManagementRCEUnauthenticated Accesshttps://runtimerebel.com/blog/oracle-fusion-middleware-rce-flaw-immediate-patch-requiredhttps://runtimerebel.com/blog/oracle-fusion-middleware-rce-flaw-immediate-patch-requiredA critical unauthenticated remote code execution (RCE) flaw in Oracle Fusion Middleware's Identity and Web Services Managers demands immediate patching.Fri, 20 Mar 2026 20:12:16 GMTOracle Fusion MiddlewareRCEIdentity ManagerWeb Services ManagerCritical VulnerabilityUnauthenticated Access