LR pixel

WordPress Core Unauthenticated RCE (WP2Shell)

von | 30. Juli 2026 | Unkategorisiert

What is the Attack? FortiGuard Labs is observing increasing exploitation activity targeting WP2Shell, a critical unauthenticated remote code execution (RCE) attack chain affecting WordPress Core. Unlike most WordPress attacks that rely on vulnerable plugins or themes,...

PTC Windchill & FlexPLM RCE

von | 28. Juli 2026 | Unkategorisiert

What is the Attack? A critical unauthenticated remote code execution (RCE) vulnerability affecting PTC Windchill PDMlink and PTC FlexPLM is being actively exploited by Cl0p ransomware affiliates. The attackers are targeting vulnerable Internet-facing Product Lifecycle...

Joomla SP Page Builder RCE

von | 17. Juli 2026 | Unkategorisiert

What is the Vulnerability? FortiGuard telemetry shows continued exploitation attempts targeting vulnerable Joomla SP Page Builder installations. CVE-2026-48908 is a critical unauthenticated remote code execution (RCE) vulnerability affecting the SP Page Builder...

Ubiquiti UniFi OS RCE

von | 9. Juli 2026 | Unkategorisiert

What is the Vulnerability? Multiple critical vulnerabilities affecting Ubiquiti UniFi OS can be chained together to achieve unauthenticated remote code execution (RCE) with root privileges. The vulnerabilities include CVE-2026-34908, CVE-2026-34909, and...

Ivanti Sentry Pre-Authentication RCE

von | 3. Juli 2026 | Unkategorisiert

What is the Vulnerability? FortiGuard Labs continues to observe exploitation attempts targeting CVE-2026-10520 following the public release of technical details and proof-of-concept (PoC) exploit code. CVE-2026-10520 is a critical vulnerability affecting Ivanti Sentry...