ThreatVectr
Tag

#unauthenticated access

3 stories taggedunauthenticated access.

Aerial 16:9 view looking straight down at a large outdoor stadium at dusk, floodlights illuminating the pitch, surrounding city lights fading into the distance,
Threat Intelligence

Hackers Used Guest Access to Quietly Steal Data From Salesforce and ServiceNow

A newly spotted campaign, tracked as 'City-Forum', used anonymous login features built into two widely used business platforms to map and copy out sensitive data, no stolen password required.

3 min read
AI Security

Langflow's Unauthenticated File-Write Flaw Is Being Exploited — Patch Dropped 73 Days Ago

CVE-2026-5027 lets attackers write files to arbitrary paths on exposed servers, and because Langflow ships with login disabled by default, exploitation requires exactly zero credentials.

3 min read
Vulnerabilities

ServiceNow's Unauthenticated API Endpoint Left Tenant Data Exposed for Months

An API resource shipped with authentication disabled by default. Now enterprises are asking whether the 'security researcher' explanation fully covers what got accessed.

2 min read
© 2026 Threat Vectr