#RCE
All CosmicBytez Labs articles tagged #RCE, across news, security advisories, how-to guides, and projects.
- News
Microsoft Patches Two Dozen RCE Flaws in Office, Including Zero-Click Outlook Bugs
Microsoft's October Office update fixes 24 critical RCE flaws, including five zero-click Outlook Reading Pane bugs rated CVSS 9.8.
- News
Hackers Exploit Collabora RCE Flaw to Backdoor Nextcloud Servers
Attackers are exploiting CVE-2026-110447, a critical unauthenticated RCE in Nextcloud's Collabora Online CODE Server app, to plant PHP web shells.
- News
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Previdian honeypots logged 1,423 attempts to exploit CVE-2026-105740, Langflow's critical authenticated RCE flaw, exposing live attacker TTPs.
- News
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Vercel shipped an out-of-band fix for two CVSS 9.5 unauthenticated RCE flaws in Next.js caching and SVG processing, plus a high-severity DoS bug.
- Security
CVE-2026-105133: Ahsay AhsayCBS Authentication Bypass Chained to Unauthenticated RCE
Attackers chain an AhsayCBS auth bypass with OS command injection for unauthenticated SYSTEM-level RCE, dropping webshells and XMRig miners.
- News
GitLab Warns of Max-Severity Code Execution Vulnerability in CI/CD Regex Compiler
GitLab patched CVE-2026-97229, a CVSS 10.0 flaw letting unauthenticated attackers run code via a crafted CI/CD regex; patch to 19.4.2, 19.3.4, or 19.2.8.
- News
Citrix Warns of New Critical NetScaler RCE Flaw in SAML Deployments
A new critical NetScaler ADC and Gateway memory-overflow flaw in SAML configurations enables RCE; Citrix urges admins to patch immediately.
- News
Rejetto HFS Servers Now Actively Scanned for Critical RCE Flaw
Attackers are actively scanning for CVE-2026-61500, a weak signing-key flaw in Rejetto HFS enabling session forgery and remote code execution.
- News
SWIFT Banking & Government Middleware Enables RCE
Thales SConnect flaw CVE-2026-18397 (CVSS 9.4) let any site trigger drive-by RCE on hardware-MFA machines used for SWIFT and government logins.
- Security
CVE-2026-90970: GitLab AI Gateway Prompt Template Sandbox Escape
A CVSS 9.9 flaw lets an authenticated Duo Agent Platform user escape the AI Gateway's prompt template sandbox and run commands on self-hosted servers.
- Security
CVE-2026-103110: Pexip Infinity Conferencing Node Critical RCE
A CVSS 9.8 unauthenticated RCE flaw in Pexip Infinity lets remote attackers execute code on Conferencing Nodes pre-38.2, 39.0, 39.1, and 40.0.
- News
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
Two critical NetScaler zero-days (CVSS 9.5) hit default Citrix configs; CISA lists both as exploited, with no workarounds available.
- News
US, UK, and Dutch Agencies Warn of Actively Exploited Citrix NetScaler Zero-Days
US, UK, and Dutch agencies warn Citrix NetScaler ADC and Gateway zero-days CVE-2026-88771 and CVE-2026-88772 are under active global exploitation.
- Security
Critical Stack Overflow in FAST FAC1200R Routers Has Public Exploit
CVE-2026-101037 lets remote attackers crash or hijack FAST FAC1200R routers via the devdiscover service; a public exploit exists and no patch is available.
- Security
CVE-2026-101075: Netcore NR289-GE Unauthenticated OS Command Injection
A critical OS command injection in Netcore NR289-GE routers lets unauthenticated attackers execute root commands via location_time.cgi.
- Security
CVE-2026-101076: Netcore NR289-GE Router Unauthenticated OS Command Injection
A critical, unauthenticated OS command injection in Netcore NR289-GE routers has a public exploit, letting remote attackers run commands as root.
- Security
CVE-2026-12342: SailPoint IdentityIQ Unauthenticated Remote Code Execution
A critical, unauthenticated RCE in SailPoint IdentityIQ's web service API lets attackers execute code with no credentials.
- Security
CVE-2026-101001: Netcore NBR200V2 Web Management Interface OS Command Injection via network_tools
Unauthenticated OS command injection in Netcore NBR200V2's network_tools CGI handler via QUERY_STRING gives remote attackers root-level code execution.
- Security
CVE-2026-101002: Netcore NBR200V2 Tools Ping Handler OS Command Injection
Netcore NBR200V2's Ping diagnostic tool injects an unsanitized url argument into a system() call, enabling remote command injection.
- Security
CVE-2026-82901: Ultra Addons for Contact Form 7 Arbitrary File Upload
Ultra Addons for Contact Form 7 (≤ 3.5.50) allows unauthenticated arbitrary file upload via a weakly validated PDF Generator signature field, enabling RCE.
- Security
Unauthenticated RCE in GestSup Helpdesk via IMAP Attachment Handling
GestSup's basic IMAP connector fails to block dangerous file extensions, letting unauthenticated attackers mail PHP webshells into ticket mailboxes for RCE.
- Security
CVE-2026-39353: InvoicePlane Template Whitelist Flaw Enables RCE
A critical InvoicePlane flaw lets a trusted PHP template become unauthenticated RCE via the public invoice view. CVSS 9.1, fixed in 1.7.2-rc-1.
- Security
CVE-2026-42322: Piwigo Logo Upload Flaw Enables Authenticated RCE
Piwigo ≤ 16.4.0 lets an authenticated admin bypass extension checks in the logo uploader to plant a PHP webshell. CVSS 9.1 — patch to 16.4.0.
- News
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds fixed two unauthenticated RCE flaws in Observability Self-Hosted — CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325 (CVSS 8.8) — in version 2026.2.3.
- News
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
CVE-2026-94545 (CVSS 9.5) lets attacker-controlled input reach unescaped SVG output in Next.js ImageResponse, enabling RCE. Patched in 16.3.6.
- News
WordPress Patches 'Click2Shell' Vulnerability
WordPress 7.1.1 patches a CSRF flaw that let attackers force theme installs and chain to full remote code execution on self-hosted sites.
- Security
MaxKB SandboxShellBackend Flaw Enables Unauthenticated Shell Execution
MaxKB's SandboxShellBackend skips human approval on its shell tool, letting untrusted input trigger unauthenticated RCE (CVSS 10).
- Security
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Heap-based buffer overflow in F5 BIG-IP APM (OAuth + access policy) allows unauthenticated RCE; added to CISA KEV as actively exploited.
- Security
CVE-2026-94089: Critical Unauthenticated Stack Overflow in D-Link DIR-868L Routers
A CVSS 10 stack-based buffer overflow in D-Link DIR-868L's authentication CGI lets unauthenticated remote attackers achieve full router compromise.
- Security
CVE-2026-94095: Netcore NBR200V2 Traceroute Command Injection Enables Root RCE
An unauthenticated command injection in Netcore NBR200V2's traceroute tool lets attackers run arbitrary commands as root via ubus JSON-RPC.
- Security
CVE-2026-94096: Command Injection in Netcore NBR200V2 LAN IP Configuration Handler
Netcore NBR200V2 routers are vulnerable to unauthenticated command injection via the ipv4 argument in the LAN IP configuration handler.
- Security
CVE-2026-94097: Netcore NBR200V2 CGI Diagnostic Endpoint Command Injection
A third command injection flaw in Netcore NBR200V2's network_tools CGI endpoint lets remote attackers run arbitrary shell commands unauthenticated.
- Security
CVE-2026-94098: Command Injection in Netcore NBR200V2 Firmware Upgrade Endpoint
Netcore NBR200V2's firmware upgrade CGI endpoint injects the QUERY_STRING argument into a shell command, enabling unauthenticated remote injection.
- Security
CVE-2026-94099: Command Injection in Netcore NBR200V2 Backup Restore Endpoint
The restore.cgi backup-restore endpoint on Netcore NBR200V2 routers is vulnerable to unauthenticated command injection via QUERY_STRING.
- Security
CVE-2026-94100: Buffer Overflow in Netcore NBR200V2 WAN VLAN Reconfiguration
A buffer overflow in Netcore NBR200V2's routerd WAN VLAN handler can be triggered remotely via the vlan_wanX.ports argument.
- Security
Forminator Forms Plugin Flaw Enables Remote Code Execution via XML-RPC
CVE-2026-87067 lets users with forms-management permission write arbitrary files and execute code through insecure XML-RPC deserialization.
- Security
CVE-2026-93742: Totolink A3002MU Command Injection via formWsc
Public PoC exploits an unauthenticated command injection in Totolink A3002MU's WPS handler, giving remote attackers root on the router.
- Security
CVE-2026-93985: OpenPanel js-runtime Sandbox Escape to RCE
A webhook template validator flaw in OpenPanel js-runtime lets project users reach the Function constructor and run code in the worker process.
- Security
CVE-2026-93958: D-Link R95 (BE9500) Command Injection to Root RCE
A public PoC chains D-Link R95 BE9500 firmware 1.00.16's SetTimeSettings handler into authenticated command injection for root shell access.
- News
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Unauthenticated attackers can run OS commands on Orkes Conductor via unsandboxed script evaluators. Fortinet blocked ~7,000 attempts in a week.
- Security
Gravity Forms Unauthenticated File Upload Lets Attackers Achieve RCE
CVE-2026-84434 (CVSS 9.8) lets unauthenticated attackers bypass Gravity Forms' hidden-field validation to upload executable files. Patch now.
- Security
WP Photo Album Plus RCE Lets Subscribers Hijack ImageMagick Commands
CVE-2026-87909 (CVSS 7.5) lets Subscriber-level WordPress users achieve RCE in WP Photo Album Plus via unsanitized filenames passed to ImageMagick.
- News
Critical Check Point Flaw Lets Unauthenticated Attackers Run Code as Root
A CVSS 9.8 stack overflow in Check Point's Security Management Server allows unauthenticated root RCE; Kaspersky and Tanium also patch flaws this week.
- Security
Critical RCE in AF Companion WordPress Plugin (CVE-2026-84738)
AF Companion before 2.2.0 lets low-privileged store-management users upload arbitrary PHP files, enabling full remote code execution.
- Security
Critical Unauthenticated RCE in HGiga OAKlouds via Insecure Deserialization (CVE-2026-93467)
HGiga's OAKlouds platform lets unauthenticated attackers execute arbitrary code by sending crafted serialized data. CVSS 9.8, no patch yet.
- News
Cisco Patches 44 Vulnerabilities Across FMC, ISE, and Nexus Dashboard
Cisco patches 44 flaws across FMC, ISE, and Nexus Dashboard, including root-access and RCE bugs; two FMC CVEs were already exploited since August.
- News
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
A critical Unbound DNSSEC validator heap overflow (CVE-2026-81642, CVSS 9.1) enables RCE via a malicious DNS zone; patch to 1.26.1.
- News
Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover
Two unauthenticated RCE flaws in The Events Calendar WordPress plugin risk takeover of 200,000+ sites; patches are now available.
- News
Cisco Secure Email Gateway Zero-Day Exploited to Execute Root Commands
CVE-2026-76461 (CVSS 9.8) lets attackers send crafted emails with malicious SQL to gain root RCE on Cisco Secure Email Gateway; CISA gives feds 3 days.
- News
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
China-linked actor Red Heron weaponized Gitea RCE CVE-2026-60004 within days, breaching 13 orgs across six countries with a custom implant.
- Security
Critical Stack Overflow in D-Link DIR-823G Routers (CVE-2026-90680)
An unauthenticated stack-based buffer overflow (CVSS 9.9) in D-Link DIR-823G's HNAP1 interface allows remote attackers to corrupt memory...
- News
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
Researchers tie a spring 2026 flood of 2,000+ malicious RubyGems packages to autonomous OpenAI agents that gained RCE on RubyDoc.info.
- Security
CSRF-to-RCE File Upload Flaw in Gpx2Graphics Plugin
CVE-2026-81090 lets attackers trick a logged-in WordPress admin into uploading a PHP webshell through the Gpx2Graphics plugin.
- Security
DS Ad Rotator Plugin Flaw Allows Unauthenticated RCE on WordPress
CVE-2026-81402 lets unauthenticated attackers upload arbitrary PHP files through the DS Ad Rotator plugin's unprotected image upload handler.
- Security
Masteriyo LMS Deserialization Flaw Lets Low-Privilege Users Hit RCE
CVE-2026-82845 lets minimal-account WordPress users inject PHP objects through Masteriyo LMS metadata and achieve remote code execution.
- Security
CVE-2026-89010: WAVLINK Router Unauthenticated Root Command Injection
A critical OS command injection in WAVLINK WN535M1/WN535M3 routers lets unauthenticated attackers run root commands via sync_server.
- Security
CVE-2026-85025: Langflow MCP Endpoint Flaw Enables Unauthenticated RCE
Langflow OSS 1.0.0-1.11.5 lets unauthenticated attackers run arbitrary code via public MCP project endpoints due to broken session isolation.
- Security
CVE-2026-89094: Forgejo Template Repository Flaw Enables Remote Code Execution
Forgejo before 16.0.4 mishandles template expansion, letting a malicious template repository achieve RCE on the Forgejo host. CVSS 9.9.
- Security
CVE-2026-36433: Actions Semiconductor Media Player Utilities RCE
A physically-proximate attacker can execute arbitrary code via Production.dll and RdiskUpgrade.exe in Actions Semiconductor's Media Player Utilities v4.46.
- Security
CVE-2026-71805: LZ-litchi Unauthenticated Arbitrary File Upload
LZ-litchi 1.0.0 lets unauthenticated attackers upload arbitrary files outside the storage directory via a path-traversal flaw in its upload API.
- Security
CVE-2026-12645 & CVE-2026-12646: Ivanti Neurons for ITSM Missing-Authorization RCE Flaws
Two CVSS 9.9 missing-authorization bugs in Ivanti Neurons for ITSM let any authenticated user run code on the server. On-prem admins must patch.
- Security
CVE-2026-75650: StyleSmuggler Zero-Day Grants Unauthenticated RCE in Adobe Commerce & Magento
A maximum-severity template injection flaw in Adobe Commerce and Magento is under active exploitation, letting attackers plant Linux backdoors pre-auth.
- News
N-able Patches Max-Severity N-central RCE Amid Live Attacks
N-able rushed out N-central Hotfix 4 for CVE-2026-86218, a 10.0 pre-auth RCE, after Huntress flagged signs of related exploitation.
- News
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE
TantoSec turned an AES-CBC padding oracle in Telerik UI for ASP.NET AJAX into unauthenticated RCE; a public exploit chain landed Sep 7.
- Security
CVE-2026-79697: Advantech WISE-6610 Unauthenticated Command Injection
A CVSS 9.9 command injection flaw in Advantech WISE-6610 industrial gateways lets remote attackers run arbitrary OS commands; a public exploit exists.
- Security
Cua Computer-Server Auth Bypass Enables Unauthenticated RCE
Cua computer-server before v0.3.42 skips authentication when a container name env var is unset and binds to all interfaces, exposing desktop...
- Security
Unauthenticated Root RCE in AutoAgent's Sandbox TCP Server
AutoAgent's sandbox TCP command server binds to all interfaces with no authentication, letting anyone execute root shell commands inside the...
- Security
CVE-2026-86148: Tenda CP3 OS Command Injection via AlarmVoiceURL
A critical unauthenticated OS command injection flaw in Tenda CP3 Wi-Fi cameras lets remote attackers run arbitrary commands via the AlarmVoiceURL parameter.
- Security
CVE-2026-86149: Tenda CP3 OS Command Injection via NetCheckPing
A second critical command injection flaw in Tenda CP3 cameras lets remote attackers execute OS commands through the ping utility's host/interface argument.
- Security
Tenda HG10 Routers Hit By Critical Unauthenticated Buffer Overflow
A critical buffer overflow in Tenda HG10 firmware's formURL function allows remote memory corruption with a public exploit and no patch yet.
- Security
Tenda HG10 formgponConf Flaw Allows Unauthenticated Root Command Injection
A near-maximum-severity OS command injection in Tenda HG10's formgponConf function lets attackers run root commands remotely; no patch is available.
- News
'StyleSmuggler' Zero-Day in Magento and Adobe Commerce Is Actively Backdooring Live Stores
Sansec found an unpatched Magento/Adobe Commerce 0-day, StyleSmuggler, giving unauthenticated RCE via poisoned templates rendered in failed-payment emails.
- Security
AI Website Builder WordPress Plugin: Unauthenticated RCE via Missing Authorization
CVE-2026-82923 lets unauthenticated attackers write arbitrary files, install plugins, and wipe content on sites running the GitHub build of AI Website Builder.
- Security
Critical Unauthenticated RCE in Hummingbird WordPress Plugin
A namespace-resolution bug leaves Hummingbird's debug log web-accessible and unsanitized, letting unauthenticated attackers plant PHP via a cookie.
- Security
CVE-2025-9314: Unauthenticated File Upload in Developer Tools WordPress Plugin
A critical, unauthenticated arbitrary file upload flaw in the Developer Tools plugin's bundled SWFUpload component allows full site takeover.
- Security
CVE-2026-4357: Maximum-Severity File Upload Flaw in Embed HTML5 Game Plugin
A perfect-10 CVSS unauthenticated file upload bug in the Embed HTML5 Game WordPress plugin lets attackers drop PHP backdoors with zero access.
- Security
CVE-2026-77009: Subscriber-to-RCE via Exposed Debug Console in WatchMan-Site7
A critical code injection flaw in WatchMan-Site7 lets any authenticated subscriber run arbitrary PHP through the plugin's unrestricted debug console.
- News
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two chained GeoNetwork flaws let unauthenticated attackers achieve RCE. Ethiack found 121 exposed instances, 89% government or military.
- News
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
SonicWall confirms active exploitation of a chained SSRF and OS command injection pair in SMA 1000 appliances, its third such attack chain in a year.
- Security
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
A post-auth OS command injection in the SMA1000 Management Console, chained with a pre-auth SSRF flaw, gives attackers unauthenticated root-level RCE.
- Security
CVE-2026-75865: WPLP Cookie Consent Plugin Unauthenticated File Upload
A critical flaw in the WPLP Cookie Consent WordPress plugin lets unauthenticated attackers upload arbitrary files, opening a path to remote code execution.
- Security
CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability
Critical unsafe reflection flaw in PaperCut NG/MF lets attackers run arbitrary Java code; now on CISA's KEV list and tied to active data theft.
- Security
Critical Unauthenticated Buffer Overflow in Tenda HG10 Routers
CVE-2026-82542 (CVSS 10) lets remote attackers trigger a buffer overflow in Tenda HG10 routers via the formIPv6Routing handler. Public exploit exists.
- Security
Sigma Forms Pro WordPress Plugin: Unauthenticated RCE via File Upload (CVE-2026-14494)
CVE-2026-14494 (CVSS 9.8) lets unauthenticated attackers upload PHP webshells through Sigma Forms Pro's default form templates. No patch yet.
- News
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five critical flaws in WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP enable auth bypass, takeover, and RCE.
- Security
Critical RCE in IBM Langflow OSS via Unauthenticated A2A Endpoint
CVE-2026-19286 (CVSS 9.8) lets remote attackers execute arbitrary code on Langflow OSS 1.0.0-1.11.1 through the public A2A endpoint, no auth needed.
- Security
IBM Langflow OSS Flaw Lets Authenticated Users Escalate to Full RCE
CVE-2026-19295 (CVSS 9.9) lets an authenticated Langflow user run arbitrary OS commands by crafting a flow, bypassing the custom-component lockdown.
- News
Over 8,300 Gitea Servers Still Vulnerable to Active Code Execution Attacks
Shadowserver finds 8,300+ exposed Gitea instances unpatched against CVE-2026-60004, a critical RCE flaw already deploying cryptominers.
- News
PaperCut Releases Second Emergency Patch for Exploited Flaws
PaperCut ships Emergency Patch Release 2 for CVE-2026-81578 and CVE-2026-82078 after researchers bypassed the first fix in active attacks.
- News
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE — One Starts Over Bluetooth
Researcher discloses two root RCE chains in the Unitree G1 EDU robot; one is a wormable, unauthenticated Bluetooth exploit reaching root remotely.
- News
Next.js Patches Two Critical RCE Flaws — AVIF and Windows Path Traversal
Vercel patched two critical Next.js RCEs: a libheif AVIF heap overflow (CVSS 9.5) and a Windows-only path traversal flaw (CVSS 9.0).
- Security
CVE-2026-77533: UniFi Protect Command Injection via Improper Input Validation
A critical flaw in UniFi Protect lets a low-privileged, network-adjacent attacker inject OS commands on the host device. Patch to 7.2.105+.
- Security
CVE-2026-80235: EFence Unauthenticated Arbitrary File Upload to RCE
EFence by Thinking Software Technology allows unauthenticated remote attackers to upload web shells and achieve full code execution.
- News
Critical Avada WordPress Theme Flaw Enables Zero-Click RCE
Wordfence's AI agent chained six flaws in the Avada theme into an unauthenticated RCE, patched in Avada 7.16.1 for 1M+ sites.
- News
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
CVE-2026-60004 lets any registered Gitea user hijack the server via a Git hook injection; CISA adds it to KEV after a reported miner deployment.
- News
Hackers Target Microsoft SharePoint RCE Chain With PoC Exploit
Attackers are probing a two-bug SharePoint chain — a JWT auth bypass plus a BCS flaw — after public PoCs made unauthenticated RCE reachable.
- Security
CISA Adds 2019 Microsoft SQL Server RCE Flaw to KEV Catalog
CISA added CVE-2019-1068, a seven-year-old Microsoft SQL Server RCE flaw, to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
- Security
CISA Adds Ajax.NET Professional Deserialization RCE to KEV Catalog
CISA added CVE-2021-23758, a critical unauthenticated deserialization RCE in the end-of-life AjaxPro.2 library, to its Known Exploited Vulnerabilities catalog.
- Security
CVE-2026-16286: Unauthenticated Web Shell Upload in TRtek Software Repository Management
Unrestricted file upload flaw lets attackers plant a web shell on TRtek's Software Repository Management with no authentication required.
- Security
CVE-2026-63586: Unauthenticated Root RCE in Weidmueller IE-SR-2TX-WL Industrial Routers
Critical OS command injection via the HTTP Basic Auth username lets unauthenticated attackers run root commands on Weidmueller security routers.
- Security
CVE-2026-65083: Critical Sandbox Provisioning Flaw in NVIDIA OpenShell
A CVSS 9.9 flaw in NVIDIA OpenShell's sandbox provisioning API can leave AI agent sandboxes with an incomplete block-list, opening the door to RCE.
- Security
Critical OCPP Stack Buffer Overflow in EV Charging RTOS Clients
CVE-2026-13214 is a CVSS 9.8 stack buffer overflow in OCPP 1.6 parse_getconfig_msg() allowing unauthenticated RCE on EV charging station firmware.
- Security
CVE-2026-78207: Critical Prototype Pollution in exceljs-hardened Before v5.0.0
A CVSS 9.4 prototype pollution vulnerability in exceljs-hardened's deepMerge helper allows attackers to corrupt Object.prototype via crafted XLSX files.
- Security
CVE-2026-78211: Critical OS Command Injection in 4MOSAn GCB Doctor
A CVSS 9.8 critical unauthenticated RCE vulnerability in 4MOSAn GCB Doctor exposes systems to full OS command injection via an unremoved ADOdb test page.
- Security
CVE-2026-0551: PHP Object Injection in PPWP – Password Protect Pages WordPress Plugin
PPWP WordPress plugin up to 1.9.18 allows contributor-level PHP object injection via deserialization, enabling RCE on affected sites.
- Security
CVE-2026-77946: TRENDnet TEW-821DAP Critical Stack Buffer Overflow
CVSS 10.0 RCE flaw in TRENDnet TEW-821DAP firmware lets attackers exploit NTP config with no patch available.
- Security
CVE-2026-78050: Critical Stack Buffer Overflow in Comfast CF-N1-S Router
CVSS 9.9 stack overflow in Comfast CF-N1-S 2.6.0.1 NTP timezone endpoint enables unauthenticated remote code execution.
- Security
CVE-2026-61539: Xinference Llama3 Tool-Call eval() Remote Code Execution
CVSS 10.0: Xinference passes attacker-controlled Llama3 tool-call output directly to eval(), enabling unauthenticated RCE on all versions ≤ 2.5.0.
- Security
CVE-2026-73570: Zimbra ZCS OS Command Injection via SMTP
Zimbra Collaboration Suite contains a critical unauthenticated OS command injection flaw allowing RCE as the Zimbra user via crafted SMTP requests.
- News
Critical isolated-vm Vulnerability Leads to RCE on Host
A TOCTOU type confusion bug in isolated-vm lets sandboxed JavaScript escape the V8 isolate and execute arbitrary code on the host. Update to 6.2.0 or 7.0.1.
- News
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CVE-2026-73570, a CVSS 8.9 command injection flaw in Zimbra Collaboration, is actively exploited in the wild for unauthenticated RCE via SNMP.
- News
Critical Elementor Pro Bug Exposes WordPress Sites to RCE Attacks
CVE-2026-32475 (CVSS 9.0): Unauthenticated attackers can upload PHP webshells via a loop desync flaw in Elementor Pro's file upload field.
- News
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A critical unpatched flaw in isolated-vm allows sandboxed JavaScript code to escape its isolated environment and achieve host-level remote code execution.
- News
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit
This week: Gogs CVSS 10.0 RCE via path traversal, n8n prototype pollution, Iran IRGC $10M bounty, and GLM-5.3 AI discovering 2,436 vulnerabilities.
- Security
CVE-2026-53545: Termix SSH Tunnel Command Injection — CVSS 9.8 Critical
Critical OS command injection in Termix's SSH tunnel teardown lets authenticated attackers execute arbitrary OS commands on hosts. Patch to 2.3.2.
- Security
Critical Unauthenticated RCE in JetEngine WordPress Plugin (CVE-2026-66613)
A CVSS 9.8 unauthenticated remote code execution flaw in JetEngine plugin <= 3.8.14 lets attackers fully compromise WordPress sites.
- Security
Critical PHP Object Injection in FundEngine Plugin (CVE-2026-32470)
An unauthenticated PHP Object Injection flaw (CVSS 9.8) in FundEngine <= 1.7.9 allows remote attackers to execute arbitrary code without credentials.
- Security
Critical File Upload RCE in Templatiq WordPress Plugin (CVE-2026-32474)
CVE-2026-32474 allows Contributor-level users to upload arbitrary files in Templatiq <= 0.2.5, enabling remote code execution. CVSS score: 9.9.
- News
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
CISA added a critical Ray framework flaw to its KEV catalog. The vulnerability enables browser-based RCE in AI/ML distributed computing workloads.
- Security
Microsoft IKE Service Extensions Double Free RCE (CVE-2026-33824)
CISA-flagged double free vulnerability in Microsoft IKE Service Extensions enables unauthenticated remote code execution. Patch immediately.
- Security
vm2 Sandbox Escape via Error.cause Host Object Leak (CVE-2026-47686)
Critical vm2 sandbox escape allows Node.js sandbox code to access the host process object via unsanitized Error.cause, enabling full RCE.
- Security
vm2 Prototype Chain Escape via Function.prototype.call Stacking (CVE-2026-47698)
Critical vm2 flaw lets sandboxed code sever host intrinsic prototype chains using stacked Function.prototype.call, escaping the sandbox entirely.
- News
Forminator WordPress Plugin Flaw Enables Unauthenticated RCE via PHP Upload
CVE-2026-15748 (CVSS 9.8) in Forminator Forms allows unauthenticated PHP webshell uploads for full RCE on 600,000+ WordPress sites. Patch to 1.56.2 now.
- Security
CVE-2025-62593: Ray Project Code Injection — DNS Rebinding Enables Unauthenticated RCE
Critical RCE in Anyscale Ray via DNS rebinding attack bypasses User-Agent checks, exposing developer dashboards to unauthenticated job submission.
- Security
CVE-2026-19959: Edimax EW-7478APC Critical Stack-Based Buffer Overflow
Critical stack overflow in Edimax EW-7478APC 1.04 allows RCE via pppUserName parameter. No patch available; vendor has not responded to disclosure.
- Security
CVE-2026-19961: Critical Buffer Overflow in Edimax EW-7478APC Wireless Router
A CVSS 9.9 buffer overflow in the Edimax EW-7478APC 1.04 allows unauthenticated remote code execution via the formWlSiteSurvey endpoint.
- Security
CVE-2026-14498: Query Wrangler WordPress Plugin Exposes Sites to RCE
A high-severity RCE flaw (CVSS 8.8) in the Query Wrangler WordPress plugin lets authenticated attackers inject and execute arbitrary PHP via a missing...
- Security
CVE-2026-18438: Templately WordPress Plugin RCE via File Upload
CVSS 8.8 flaw in Templately for WordPress lets authenticated subscribers execute arbitrary code via a filename validation bypass in file upload.
- Security
CVE-2026-73043: SiYuan RCE via Template Calculation Operator
Critical RCE in SiYuan note-taking app. Unsanitized Go templates allow script injection for all versions before v3.7.4.
- News
Hackers Exploiting Unpatched GeoServer Zero-Day With SQL Injection to RCE
Active exploitation attempts targeting an unpatched GeoServer zero-day began within hours of public disclosure. No patch available — restrict access now.
- News
Adobe Patches Three CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe's August 2026 patch cycle fixes 3 maximum-severity RCE vulnerabilities across ColdFusion and Campaign Classic. Priority 1 — patch within 72 hours.
- News
Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access
CVE-2026-59310 is under active exploitation just 5 days after disclosure, with 361 victims across 47 countries receiving reverse SSH backdoors.
- Security
CVE-2026-11325: Cloudflare pages-action GitHub Actions RCE
High-severity RCE in cloudflare/pages-action exposes CI/CD credentials. Migrate to wrangler-action before Sept 18, 2026 sunset.
- Security
CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)
Critical CVSS 9.8 buffer overflow in the MongoDB BI Connector ODBC Driver may allow remote code execution via long metadata names.
- News
SAP Commerce Cloud RCE Flaw Lets Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231 scores CVSS 10.0 in SAP Commerce Cloud Data Hub Adapter — patch immediately as unauthenticated RCE with full system compromise is possible.
- Security
SonicWall GMS Unauthenticated Command Injection RCE
A critical unauthenticated command injection flaw in SonicWall GMS 9.5.1 and earlier allows remote attackers to execute arbitrary code via crafted requests.
- Security
CVE-2026-13716: Path Traversal RCE in Crafty Controller
A critical path traversal vulnerability in Crafty Controller allows authenticated remote attackers to upload files to arbitrary paths and achieve remote...
- Security
D-Link DWR-M961 Command Injection via FOTA Upgrade Interface (Quectel)
A command injection vulnerability in D-Link DWR-M961 routers (hardware C1) allows remote attackers to execute arbitrary OS commands via the fota_url...
- Security
D-Link DWR-M961 Command Injection via FOTA Upgrade Interface (Fibocom)
A command injection vulnerability in D-Link DWR-M961 routers (hardware C1) allows remote attackers to execute arbitrary OS commands via the fota_url...
- Security
D-Link DWR-M961 Command Injection via Ping Diagnostic Interface
A command injection vulnerability in D-Link DWR-M961 routers (hardware C1) allows remote attackers to execute arbitrary OS commands via the host parameter...
- Security
D-Link DWR-M961 Command Injection via Traceroute Diagnostic Interface
A command injection vulnerability in D-Link DWR-M961 routers (hardware C1) allows remote attackers to execute arbitrary OS commands via the host and ipVer...
- Security
CVE-2026-71948: D-Link DWR-M961 Command Injection via formDebugDiagnosticRun
A critical unauthenticated command injection vulnerability in D-Link DWR-M961 routers allows remote attackers to execute arbitrary commands via the host...
- Security
CVE-2026-71949: D-Link DWR-M961 Command Injection via formUSSDSetup
A critical unauthenticated command injection vulnerability in D-Link DWR-M961 routers enables remote code execution through the ussdValue and...
- Security
CVE-2026-71950: D-Link DWR-M961 Command Injection via formSmsManage
A critical unauthenticated command injection in the D-Link DWR-M961 SMS management interface allows remote attackers to execute arbitrary OS commands via...
- Security
CVE-2026-71951: D-Link DWR-M961 Command Injection via formIMEISetup
A critical unauthenticated command injection vulnerability in D-Link DWR-M961 routers allows remote code execution by injecting OS commands into the...
- News
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
A critical pre-auth RCE vulnerability in Progress Kemp LoadMaster has been added to CISA's Known Exploited Vulnerabilities catalog following 792...
- Security
CVE-2022-4995: Weaver E-cology 9.0 Unauthenticated File Upload Enables Webshell RCE
A critical unauthenticated file upload vulnerability in Weaver E-cology 9.0 allows attackers to upload JSP webshells through a vulnerable endpoint,...
- Security
CVE-2026-50540: Kata Containers Host Code Execution via Unvalidated Config Path
A critical vulnerability in Kata Containers prior to 4.0.0 allows a pod user to load an arbitrary TOML file on the host through an unvalidated annotation,...
- Security
Gladinet CentreStack / Triofox Hardcoded AES Key Enables Unauthenticated LFI and RCE Chain
A hardcoded AES cryptographic key in Gladinet CentreStack and Triofox allows unauthenticated attackers to exploit arbitrary local file inclusion, with...
- Security
CVE-2026-28139: Critical PHP Object Injection in Ajax Search Lite
A CVSS 9.8 unauthenticated PHP object injection flaw in Ajax Search Lite <= 4.14.4 exposes 80,000+ WordPress sites to potential remote code execution via...
- Security
Apache CXF JMS Deserialization Flaw Allows Unauthenticated RCE
A critical Java deserialization vulnerability in Apache CXF's JMS transport allows any attacker who can reach a JMS destination to trigger remote code...
- News
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
This week's threat landscape is defined by cheap leverage: an RCE that fires before the first prompt, a Samsung vulnerability requiring a single click, an...
- Security
CVE-2026-71319: Critical Nuxt DevTools WebSocket RCE (CVSS 9.6)
A critical unauthenticated RCE vulnerability in Nuxt DevTools exposes a bidirectional RPC channel over the Vite HMR WebSocket, allowing any host on the...
- Security
CVE-2026-45538: OpenSIPS Stack Buffer Overflow via Oversized SIP Header
A critical stack buffer overflow in OpenSIPS versions 4.0.0 and prior allows remote code execution by sending a SIP message with a header name exceeding...
- Security
CVE-2026-61515: Puwell IP Camera Unauthenticated Command Injection
A critical unauthenticated command injection vulnerability in Puwell IP Camera firmware 2.x through 4.x allows remote attackers to execute arbitrary OS...
- Security
CVE-2026-63077: JetBrains TeamCity Deserialization RCE Added to CISA KEV
JetBrains TeamCity contains a critical deserialization of untrusted data vulnerability allowing unauthenticated remote code execution via the agent...
- Security
CVE-2026-66902: Google::Auth Perl Library RCE via Credential JSON Injection
Google::Auth for Perl versions before 0.06 passes attacker-controlled commands from external_account credentials JSON directly to system(), enabling...
- Security
CVE-2026-67979: NASA cFS Incorrect Access Control Allows Arbitrary Code Execution
Incorrect access control in the Executive Services component of NASA cFS v7.0.1 allows attackers to execute arbitrary code by placing a malicious shared...
- News
TP-Link Patches 15 Omada ZTP Flaws That Could Let Attackers Breach Networks
TP-Link has released patches for 15 vulnerabilities in the zero-touch provisioning mechanism of its Omada network ecosystem. Chained with two previously...
- Security
CVE-2026-39932: Critical RCE in OpenEMR via PHP Payload Injection
OpenEMR through 8.2.0 contains a critical remote code execution vulnerability allowing authenticated administrators to execute arbitrary OS commands by...
- Security
CVE-2026-9198: IBM Langflow Code Injection Vulnerability
A critical unauthenticated code injection flaw in Langflow 1.0.0–1.10.0 allows attackers to chain two API endpoints to obtain a SUPERUSER token and...
- News
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has patched a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw carries a perfect...
- Security
CVE-2026-16144: Kali Forms WordPress Plugin Remote Code Execution
The Kali Forms Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution (CVSS 8.1) in all versions up to 2.4.20....
- News
Rails Patches Critical Active Storage Flaw with RCE Potential (CVE-2026-66066)
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to read arbitrary server files via crafted image uploads —...
- News
Ruby on Rails Patches Critical Vulnerability Enabling File Read and RCE
The Ruby on Rails team has released an emergency patch for a critical security flaw that allows unauthenticated attackers to read arbitrary files and...
- Security
CVE-2026-17561: Critical Code Injection in Logsign SIEM
A critical code injection vulnerability in Logsign SIEM (CVSS 9.8) allows unauthenticated remote code execution on affected systems running versions prior...
- Security
CVE-2026-68770: sentence-transformers Security Control Bypass Enables RCE
A critical logic flaw in sentence-transformers' import_module_class helper allows attackers to bypass trust_remote_code=False and achieve arbitrary code...
- Security
CVE-2026-68771: ComfyUI Unsafe Pickle Deserialization Enables Unauthenticated RCE
ComfyUI v0.23.0 contains a critical unsafe deserialization vulnerability in the LoadTrainingDataset node. Unauthenticated attackers can upload a crafted...
- Security
CVE-2026-16610: Critical RCE in WordPress Admin & Site Enhancements Pro Plugin
A CVSS 9.8 unauthenticated remote code execution vulnerability in the Admin and Site Enhancements (ASE) Pro WordPress plugin allows attackers to execute...
- Security
CVE-2026-48449: Maximum Severity RCE in Adobe Campaign Classic
Adobe Campaign Classic is affected by a CVSS 10.0 Incorrect Authorization vulnerability enabling arbitrary code execution with no user interaction...
- News
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
A maximum-severity flaw (CVE-2026-59726, CVSS 10.0) in the Ruflo open-source agent harness for Claude Code and OpenAI Codex allows unauthenticated remote...
- Security
CVE-2026-13423: Streamit WordPress Theme Allows Unauthenticated Arbitrary PHP Function Execution
The Streamit WordPress theme through version 4.5.0 exposes an unauthenticated AJAX route with no authorization or nonce verification, letting any...
- Security
CVE-2026-14512: IBM WebSphere Pre-Auth Deserialization Allows RCE
A critical pre-authentication unsafe deserialization flaw (CVSS 9.8) in IBM WebSphere Application Server 8.5 and 9.0 allows remote attackers to bypass...
- Security
CVE-2026-14958: IBM Aspera Faspex 5 Shell Injection Enables RCE
A critical unquoted shell interpolation vulnerability (CVSS 9.1) in IBM Aspera Faspex 5 (versions 5.0.0–5.0.15.4) allows authenticated remote attackers to...
- Security
CVE-2026-63227: Koollab LMS SCORM File Upload Allows Webshell Deployment and RCE
A CVSS 9.9 critical vulnerability in Koollab LMS allows authenticated module designers to upload a SCORM package containing a PHP webshell to a publicly...
- Security
CVE-2026-63232: Koollab LMS SQL Injection and RCE via Unsafe Deserialisation
A critical CVSS 9.9 vulnerability in Koollab LMS allows authenticated attackers to exploit SQL injection and unsafe PHP deserialisation in the assessment...
- News
vBulletin Fixes Critical Pre-Auth RCE Flaw with Public Exploit
vBulletin has patched a critical unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary PHP code through template...
- Security
CVE-2026-11756: Critical Unauthenticated RCE in Dassault 3DEXPERIENCE
A CVSS 10.0 deserialization vulnerability in the 3DEXPERIENCE Station Launcher App allows unauthenticated attackers to execute arbitrary code on any...
- News
Hackers Target US Firms in FastJson RCE Zero-Day Attacks
Threat actors are actively exploiting an unpatched remote code execution vulnerability in Alibaba's FastJson Java library, targeting US enterprises with...
- Security
CVE-2026-13714: Realtyna IDX Plugin Unauthenticated File Upload via Hardcoded Credentials
A critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Realtyna Organic IDX + WPL Real Estate WordPress plugin (before v5.3.0)...
- News
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patch Available
A critical unpatched remote code execution flaw in Alibaba's Fastjson 1.x library is being actively exploited in the wild. Tracked as CVE-2026-16723, the...
- News
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
Threat actors linked to the Cl0p ransomware group are actively exploiting chained pre-authentication vulnerabilities in PTC Windchill and FlexPLM...
- News
Fastjson 1.x RCE Actively Exploited With No Patch Available
Attackers are actively exploiting CVE-2026-16723, a critical remote code execution flaw in Alibaba's Fastjson 1.x library affecting Spring Boot...
- News
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researcher Yuhang Wu published a working PoC exploiting two Ruby memory corruption vulnerabilities in the Oj JSON parser to achieve RCE as the...
- Security
CVE-2026-10818: WPForms Pro Arbitrary File Upload — Unauthenticated RCE
A high-severity vulnerability in WPForms Pro allows unauthenticated attackers to upload malicious files and achieve remote code execution. File type...
- News
Kimi K3 AI Agents Discovered Redis Zero-Days and Built RCE Exploits in Under 90 Minutes
Autonomous AI agents powered by Moonshot AI's Kimi K3 model found 19 Redis zero-day vulnerabilities and produced working authenticated RCE...
- Security
GoDAM WordPress Plugin Arbitrary File Upload — CVE-2026-14282
A critical unauthenticated arbitrary file upload vulnerability in the GoDAM WordPress media library plugin allows attackers to upload malicious files and...
- Security
WordPress Helpdesk Plugin Unauthenticated Code Injection — CVE-2026-15011
A critical unauthenticated PHP code injection vulnerability in the Customer Support Ticket System & Helpdesk WordPress plugin allows attackers to execute...
- Security
fastjson RCE Without Gadget or AutoType — CVE-2026-16723
A critical remote code execution flaw in fastjson 1.2.68–1.2.83 requires no AutoType enablement and no classpath gadget, making it exploitable on...
- Security
CVE-2026-16606: Critical Pre-Auth RCE in Fujitsu openFT (CVSS 9.8)
A critical unauthenticated remote code execution vulnerability in Fujitsu Software openFT allows attackers to execute arbitrary code on Linux and Solaris...
- Security
CVE-2026-28302: SolarWinds Serv-U IDOR Leads to Root RCE
A critical CVSS 9.1 vulnerability in SolarWinds Serv-U allows group administrators to exploit an insecure direct object reference flaw to escalate...
- Security
CVE-2026-64606: Apache Fury Critical Deserialization Flaw (CVSS 9.8)
A critical deserialization vulnerability in Apache Fury allows attackers to bypass class-registration checks during Java lambda deserialization, enabling...
- Security
CVE-2026-65008: Grav CMS RCE via Uncontrolled Callable in Blueprint::dynamicData()
Grav CMS 2.0.4 contains a critical remote code execution vulnerability where Blueprint::dynamicData() passes attacker-controlled callable strings directly...
- News
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Attackers are exploiting two chained critical WordPress vulnerabilities that enable unauthenticated remote code execution. A public exploit has triggered...
- Security
CVE-2024-51311: Critical Stack Overflow in Tenda TX9 Router Firmware
A critical stack overflow vulnerability (CVSS 9.8) in Tenda TX9 firmware V22.03.02.05 allows remote attackers to execute arbitrary code via a crafted...
- News
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
F5 has patched CVE-2026-42533, a critical heap buffer overflow in NGINX that allows unauthenticated remote attackers to crash worker processes and...
- News
Update Now: 7-Zip Fixes RCE Flaw Exploitable with Malicious Archives
7-Zip 26.02 patches a remote code execution vulnerability that lets attackers execute arbitrary code by convincing users to open specially crafted...
- News
WordPress Core "wp2shell" RCE Flaws Get Public Exploits — Patch Now
Public exploits have been released for the critical wp2shell remote code execution vulnerabilities in WordPress Core, putting millions of sites at...
- Security
CVE-2026-48062: CodeIgniter File Upload Validation Bypass (CVSS 9.8)
CodeIgniter versions prior to 4.7.3 contain a critical file upload validation flaw where the ext_in rule checks MIME-derived extensions instead of...
- Security
CVE-2026-63093: Cursor for Windows Binary Planting Allows RCE via Malicious Git Repository
A high-severity binary planting vulnerability in Cursor for Windows 3.2.16 enables remote attackers to achieve arbitrary code execution by placing a rogue...
- News
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
A critical unauthenticated remote code execution vulnerability in WordPress core affects all 6.9 and 7.0 installations. WordPress force-pushed emergency...
- Security
CVE-2026-14890: SGLang ZeroMQ Unauthenticated RCE via Pickle Deserialization
A critical unauthenticated remote code execution vulnerability in the SGLang AI inference framework allows attackers to deliver malicious pickle payloads...
- News
2-Click Cursor Exploit Enables Dev Environment Takeover
DeepJack: two clicks in Cursor IDE silently installs a malicious MCP server with full user privileges, stealing source code and secrets. Unpatched in July 2026.
- Security
CVE-2026-46339: 9Router Unauthenticated Plugin Registration & MCP Command Execution
A critical CVSS 10 vulnerability in 9Router AI router versions 0.4.30–0.4.36 allows unauthenticated attackers to register custom plugins and execute...
- Security
CVE-2026-51380: Tenda AC10 v3 Buffer Overflow Enables DoS and Remote Code Execution
A critical CVSS 9.8 buffer overflow vulnerability in Tenda AC10 v3 firmware V03.03.16.09 allows remote attackers to cause permanent denial of service or...
- News
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
A design flaw in the Cursor AI code editor on Windows executes any file named git.exe found in the root of a cloned project directory — automatically,...
- News
SonicWall Warns of Two Zero-Day Exploits Targeting SMA1000 — Patch Immediately
SonicWall has issued an urgent advisory warning of two zero-day vulnerabilities in its SMA1000 appliances — CVE-2026-15409 and CVE-2026-15410 — that can...
- Security
CVE-2026-15265: Tenable Agent Path Traversal — Arbitrary File Write & RCE (CVSS 9.1)
A critical path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and earlier allows a privileged attacker to write arbitrary files outside the...
- Security
CVE-2026-14453: Critical SSTI to RCE in Centreon Open Tickets (CVSS 9.6)
A critical Server-Side Template Injection vulnerability in Centreon's centreon-open-tickets module allows unauthenticated attackers to achieve Remote Code...
- Security
CVE-2026-57433: Perl Storable Signed Integer Overflow in SX_HOOK Deserialization
A CVSS 9.8 signed integer overflow in Perl's Storable module (before 3.41) allows a crafted SX_HOOK record to wrap an I32_MAX item count to -1, corrupting...
- Security
ChurchCRM Plugin RCE via Malicious ZIP Upload — CVE-2026-58409
A critical authenticated RCE vulnerability in ChurchCRM allows administrators to achieve remote code execution by uploading a malicious plugin ZIP...
- News
CISA Warns of Actively Exploited RCE Flaws in Joomla Extensions
CISA has added two Joomla extension vulnerabilities to its KEV catalog after attackers began exploiting arbitrary file upload flaws in iCagenda and...
- Security
CVE-2026-15488: Unrestricted File Upload in shiroiAdmin Enables Remote Code Execution
A high-severity unrestricted file upload vulnerability in shiroiAdmin versions 1.1 and 1.3 allows unauthenticated remote attackers to upload PHP webshells...
- Security
CVE-2026-58281: Microsoft Edge RCE via Deserialization of Untrusted Data
A high-severity deserialization vulnerability in Microsoft Edge (Chromium-based) allows unauthorized network attackers to execute arbitrary code. CVSS 8.3...
- Security
CVE-2026-61447: PraisonAI CodeAgent Remote Code Execution via Unsandboxed Python Execution
A CVSS 10.0 critical vulnerability in PraisonAI before 1.6.78 allows attackers to achieve remote code execution by injecting malicious prompts that...
- Security
CVE-2026-13353: WordPress WP Ultimate CSV Importer RCE via MappedFields Parameter
A critical CVSS 8.8 remote code execution vulnerability in WP Ultimate CSV Importer allows unauthenticated attackers to execute arbitrary PHP code on...
- Security
CVE-2026-48939: iCagenda Unrestricted File Upload Allows PHP Code Execution
A critical unrestricted file upload vulnerability in the iCagenda Joomla event calendar plugin allows unauthenticated attackers to upload arbitrary PHP...
- Security
CVE-2026-59792: JetBrains IntelliJ IDEA Remote Code Execution via Path Traversal
A critical RCE vulnerability (CVSS 9.6) in JetBrains IntelliJ IDEA before 2026.1.4 allows code execution through path traversal in project workspace ID...
- Security
CVE-2026-15158: WordPress Blocksy Companion Arbitrary File Upload (CVSS 9.8)
A critical arbitrary file upload vulnerability in the Blocksy Companion WordPress plugin (versions up to 2.1.46) allows unauthenticated attackers to...
- Security
CVE-2026-56291: Balbooa Forms Unrestricted File Upload Enables Full RCE
A critical unauthenticated file upload vulnerability in Balbooa Forms for Joomla allows attackers to upload executable files and achieve full remote code...
- Security
CVE-2011-10043: Perl Module::Load Arbitrary Module Injection Resurfaces
A decade-old CVSS 9.8 flaw in Perl's Module::Load (before 0.22) allows attackers to load arbitrary modules outside @INC via '::'-prefixed names. Now...
- Security
CVE-2026-33264: Apache Airflow Scheduler RCE via DAG Deserialization
A critical deserialization flaw in Apache Airflow allows malicious DAG authors to execute arbitrary code on the Scheduler and API Server, scoring CVSS...
- Security
CVE-2026-48908: JoomShaper SP Page Builder Unrestricted File Upload RCE
A critical unrestricted file upload vulnerability in JoomShaper's SP Page Builder allows unauthenticated attackers to upload arbitrary PHP files and...
- Security
CVE-2025-53827: ownCloud Updater Exposes Dangerous Method (CVSS 9.1)
A critical vulnerability in ownCloud Core's Updater component exposes a dangerous method to administrators, enabling potential remote code execution on...
- Security
CVE-2026-34038: Critical Coolify RCE via Authenticated Command Injection (CVSS 9.9)
A critical command injection vulnerability in Coolify's deployment pipeline allows any authenticated user with write access to execute arbitrary OS...
- Security
CVE-2026-56290: Joomlack Page Builder Unauthenticated File Upload RCE — CISA KEV
A CVSS 10.0 unauthenticated arbitrary file upload vulnerability in the Joomlack Page Builder CK Joomla extension allows any remote attacker to upload a...
- Security
CVE-2026-14635: Unrestricted File Upload RCE in CodeIgniter Ecommerce Bootstrap
A high-severity unrestricted file upload vulnerability in the kirilkirkov Ecommerce-CodeIgniter-Bootstrap allows authenticated vendor users to upload...
- Security
CVE-2026-14637: PHP Deserialization RCE in CodeIgniter Ecommerce Bootstrap Shopping Cart
A high-severity PHP deserialization vulnerability in the kirilkirkov Ecommerce-CodeIgniter-Bootstrap allows attackers to inject malicious serialized...
- News
Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution
Two critical vulnerabilities (CVE-2026-50548, CVE-2026-50549) dubbed DuneSlide allow zero-click prompt injection attacks to escape Cursor IDE's sandbox...
- Security
UniFi Connect Critical RCE via Command Injection CVE-2026-50746
A maximum-severity command injection vulnerability in Ubiquiti's UniFi Connect Application allows any network-accessible attacker to execute arbitrary OS...
- Security
UniFi Access Application Command Injection RCE CVE-2026-50748
An improper input validation flaw in Ubiquiti's UniFi Access Application enables low-privileged network attackers to inject OS commands and execute...
- News
CISA: Microsoft SharePoint RCE Flaw Now Actively Exploited
CISA added CVE-2026-45659 to its Known Exploited Vulnerabilities catalog, confirming active in-the-wild exploitation of a high-severity SharePoint...
- News
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA has added a high-severity Microsoft SharePoint Server remote code execution vulnerability to its Known Exploited Vulnerabilities catalog following...
- News
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
A critical pre-authentication remote code execution flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is under active exploitation attempts,...
- Security
CVE-2026-48276: Adobe ColdFusion Critical File Upload RCE (CVSS 10.0)
Adobe ColdFusion versions 2023.20 and 2025.9 and earlier contain a critical unrestricted file upload vulnerability that allows unauthenticated remote...
- Security
CVE-2026-48277: Adobe ColdFusion Critical Input Validation RCE (CVSS 10.0)
Adobe ColdFusion versions 2023.20 and 2025.9 and earlier contain an improper input validation vulnerability enabling unauthenticated remote code...
- Security
CVE-2026-48281: Adobe ColdFusion Input Validation RCE Zero-Day (CVSS 10.0)
A second critical improper input validation flaw in Adobe ColdFusion allows unauthenticated remote code execution in the context of the current user. Part...
- Security
CVE-2026-48282: Adobe ColdFusion Critical Path Traversal to RCE (CVSS 10.0)
Adobe ColdFusion contains a critical path traversal vulnerability (CWE-22) that enables unauthenticated remote code execution. The flaw is part of Adobe's...
- News
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are actively weaponizing CVE-2026-33017, a critical unauthenticated RCE flaw in Langflow, to deploy a Monero miner via the lambsys...
- Newsletter
June 30 Digest: BlueHammer Zero-Day, Ransomware Goes Corporate, AI Supply Chain Risks & Nation-State ICS Threats
A Microsoft Defender zero-day fuels ransomware before any patch exists; researchers dissect how syndicate groups run HR departments and tiered pricing;...
- News
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A heap overflow in libssh2's transport layer allows a malicious SSH server to achieve pre-authentication RCE against any connecting client. All versions...
- Security
CVE-2026-54352: Budibase Zip Upload Path Traversal Enables Remote Code Execution (CVSS 9.6)
A critical path traversal vulnerability in Budibase's zip upload endpoint allows attackers to write arbitrary files outside the intended temp directory,...
- News
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CISA has added CVE-2026-12569, a remote code execution flaw in PTC Windchill, to its Known Exploited Vulnerabilities catalog after confirming active...
- Security
GeoVision LPC Camera Critical RCE via thttpd Buffer Overflow (CVE-2026-57878)
A critical unauthenticated stack-based buffer overflow in thttpd on GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote attackers to execute...
- Security
GeoVision LPC Camera Critical RCE via ssvr RTSP Auth Buffer Overflow (CVE-2026-57879)
A critical unauthenticated stack-based buffer overflow in the ssvr RTSP service of GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote attackers to...
- Security
GeoVision LPC Camera Critical RCE via ssvr RTSP Digest Auth Buffer Overflow (CVE-2026-57880)
A critical unauthenticated stack-based buffer overflow in GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote code execution by exploiting...
- Security
GeoVision LPC Camera Critical RCE via vlsvr Remote Login Buffer Overflow (CVE-2026-57881)
A critical unauthenticated stack-based buffer overflow in the vlsvr daemon of GeoVision GV-LPC2011 and GV-LPC2211 cameras allows remote code execution...
- News
FFmpeg PixelSmash: CVE-2026-8461 Enables RCE via Crafted Video Files Across Thousands of Apps
A heap out-of-bounds write in FFmpeg's MagicYUV decoder — CVE-2026-8461, CVSS 8.8 — lets attackers execute shell commands by delivering a 50 KB video...
- Security
CVE-2026-12486: GeoVision GV-I/O Box 4E OS Command Injection via libNetSetObj.so
Multiple OS command injection vulnerabilities in GeoVision GV-I/O Box 4E firmware 2.09 allow attackers with network access to execute arbitrary system...
- Security
CVE-2026-12866: expr-eval npm Package Enables Arbitrary Code Execution via toJSFunction()
All versions of the expr-eval JavaScript package are vulnerable to remote code execution through the toJSFunction() API. Crafted expressions escape the...
- News
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
CVE-2026-20253, a critical unauthenticated remote code execution flaw in Splunk Enterprise, is being actively exploited in the wild just days after public...
- Security
CVE-2026-54414: FileRise Path Traversal Enables Arbitrary File Write and Admin Takeover
A critical path traversal vulnerability in FileRise before 3.16.0 allows unauthenticated attackers to write arbitrary files and completely compromise...
- Security
CVE-2026-7515: BetterDocs Pro WordPress Plugin — Unauthenticated Local File Inclusion
A critical Local File Inclusion vulnerability in the BetterDocs Pro WordPress plugin (up to v3.8.0) allows unauthenticated attackers to include and...
- News
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released emergency security updates for two critical vulnerabilities in NGINX Open Source, including a CVSS 9.2 use-after-free flaw in the HTTP/3...
- Security
CVE-2026-48907: Joomla Content Editor Unauthenticated PHP Upload Flaw
A maximum-severity improper access control flaw in Widget Factory's Joomla Content Editor allows unauthenticated attackers to upload and execute arbitrary...
- Security
CVE-2026-49774: RD Station WordPress Plugin Remote Code Injection (CVSS 9.9)
A critical code injection vulnerability in the RD Station WordPress plugin allows unauthenticated remote code execution through Remote File Inclusion,...
- Security
CVE-2026-6933: Unauthenticated RCE in Premmerce Dev Tools WordPress Plugin
A high-severity unauthenticated remote code execution vulnerability (CVSS 8.8) in Premmerce Dev Tools for WordPress allows attackers to execute arbitrary...
- Security
CVE-2026-9862: Fortra BoKS OS Command Injection — CVSS 9.8 RCE
Critical OS command injection in Fortra Core Privileged Access Manager allows unauthenticated remote code execution via the boks_autoregisterd service at...
- News
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk patches CVE-2026-20253, a CVSS 9.8 critical vulnerability enabling unauthenticated file operations and remote code execution in Splunk Enterprise.
- Security
CVE-2026-47131: vm2 Sandbox Escape via Buffer Prototype Hijack (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows sandboxed code to obtain the host TypeError constructor via Buffer.__lookupGetter__ abuse,...
- Security
CVE-2026-47137: vm2 Sandbox Escape via Strict Equality require Bypass (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows attackers to bypass the require: false security option using falsy values, circumventing the...
- Security
CVE-2026-47140: vm2 Sandbox Escape via Incomplete Builtin Denylist (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows sandboxed code to access the host process via the process and inspector/promises builtins,...
- Security
CVE-2026-47208: vm2 General Sandbox Breakout — Arbitrary Host Execution (CVSS 10.0)
A CVSS 10.0 critical vulnerability in vm2 for Node.js allows sandbox code to escape and execute arbitrary OS commands on the host system. Patched in vm2 3.11.4.
- News
LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
Security researchers have disclosed three now-patched vulnerabilities in LangGraph — including a critical chain that enables remote code execution on...
- Security
CVE-2026-11839: Unrestricted File Upload Enables Web Shell Deployment in Rotaban
A critical unrestricted file upload vulnerability in the Rotaban platform by Basarsoft Information Technologies allows authenticated attackers to upload...
- Security
CVE-2026-47367: UID Enterprise Agent Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in UID Enterprise Agent allows a low-privileged network attacker to execute arbitrary commands on the...
- Security
CVE-2026-47370: UniFi OS Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in Ubiquiti UniFi OS allows a low-privileged network attacker to execute arbitrary commands within...
- Security
CVE-2026-35273: Critical Oracle PeopleSoft RCE Exploited in the Wild
A CVSS 9.8 unauthenticated remote code execution flaw in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 is being actively exploited, with threat...
- News
Microsoft Patches Record 206 Flaws Including Three Zero-Days and Critical RCE Bugs
Microsoft's June 2026 Patch Tuesday is the largest single release on record, fixing 206 vulnerabilities across its software portfolio — including three...
- News
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
Six critical flaws in protobuf.js — the JavaScript/TypeScript Protocol Buffers library — can lead to remote code execution and denial-of-service in...
- News
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal flaw (CVE-2026-5027, CVSS 8.8) in the AI application builder Langflow is being actively exploited with no patch available....
- Security
CVE-2026-10520: Ivanti Sentry OS Command Injection — CVSS 10.0
A maximum-severity OS command injection vulnerability in Ivanti Sentry allows unauthenticated remote attackers to achieve root-level code execution. Patch...
- Security
CVE-2026-47928: Adobe ColdFusion Critical RCE — CVSS 9.6
Adobe ColdFusion 2023.19 and 2025.8 are affected by a critical improper input validation flaw enabling unauthenticated remote code execution with scope change.
- News
New Veeam Vulnerability Exposes Backup Servers to RCE Attacks
Veeam patched a critical CVE-2026-44963 flaw in Backup and Replication allowing remote code execution on domain-joined servers. CVSS 9.4 — patch immediately.
- News
Veeam Backup and Replication RCE Flaw Lets Domain Users Run Remote Code
A critical CVE-2026-44963 flaw in Veeam Backup and Replication lets low-privilege domain users achieve remote code execution on backup servers. CVSS 9.4 —...
- Security
CVE-2026-35906: T3 Technology CPE Unauthenticated Root RCE via Debug CGI
An undocumented debug CGI endpoint in T3 Technology CPE devices (T625Pro v1.0.07, T6825G v1.0.03) allows unauthenticated remote attackers to execute arbitrary…
- News
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
CISA has added a critical remote code execution vulnerability in the Mirasvit Cache Warmer Magento extension to its Known Exploited Vulnerabilities catalog…
- Security
CVE-2026-36576: Critical OS Command Injection in docker-wkhtmltopdf-aas
A CVSS 9.8 OS command injection vulnerability in openlabs docker-wkhtmltopdf-aas allows unauthenticated remote code execution via a crafted POST request to…
- Security
CVE-2026-41283: OpenStack Mistral Critical RCE Vulnerability (CVSS 9.9)
A critical unauthenticated remote code execution flaw in OpenStack Mistral through 22.0.0 allows attackers to execute arbitrary commands via exposed API…
- News
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Redis has patched a use-after-free vulnerability in its blocking-client code that allows authenticated users to execute arbitrary OS commands on the database…
- Security
CVE-2026-47065: Java Deserialization Filter Bypass via resolveProxyClass (CVSS 9.8)
A CVSS 9.8 critical Java deserialization vulnerability allows attackers to bypass ObjectInputFilter via TC_PROXYCLASSDESC, circumventing acceptMatchers…
- Newsletter
June 3 Digest: AI Ransomware, Netlogon RCE, Miasma Supply Chain
An AI-generated ransomware toolkit automates EDR evasion; Windows Netlogon RCE is actively exploited on domain controllers; the Miasma campaign hits Red Hat…
- News
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A stack-based buffer overflow flaw in HP OfficeConnect VoIP phones can be exploited remotely to achieve code execution, potentially allowing attackers to…
- Security
CVE-2018-25427: Arm Whois 3.11 Stack-Based Buffer Overflow RCE
A critical stack-based buffer overflow vulnerability in Arm Whois 3.11 (CVSS 9.8) allows remote attackers to execute arbitrary code by supplying oversized…
- News
Critical Windows Netlogon RCE Flaw Now Exploited in Attacks
Belgium's national cybersecurity authority (CCB) has issued an urgent warning that threat actors are actively exploiting a recently patched critical Windows…
- Security
CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic Server contains an unspecified vulnerability allowing unauthenticated attackers network access via T3 and IIOP protocols, potentially exposing…
- News
Chrome 148 Update Patches 151 Vulnerabilities Including Critical RCE Flaws
Google has released Chrome 148 with patches for 151 security vulnerabilities, including critical-severity flaws that could allow remote code execution....
- Security
CVE-2026-10042: manga-image-translator RCE via Unsafe Python Deserialization
A critical CVSS 9.8 remote code execution vulnerability in manga-image-translator allows unauthenticated attackers to execute arbitrary commands by...
- Security
CVE-2026-7465: RCE in Spectra Gutenberg Blocks WordPress Plugin (CVSS 8.8)
A high-severity remote code execution vulnerability in the Spectra Gutenberg Blocks plugin for WordPress allows authenticated Contributor-level attackers...
- Security
CVE-2026-9558: Critical SSTI in Mautic Enables Authenticated RCE
A Server-Side Template Injection flaw in Mautic's Twig-based theme engine allows authenticated users with theme upload permissions to execute arbitrary...
- Security
CVE-2026-4408: Samba OS Command Injection via Check Password Script
A CVSS 9.0 OS command injection flaw in Samba allows remote attackers to execute arbitrary commands on file servers and domain controllers using the %u...
- Security
CVE-2025-12686: Synology BeeStation OS Critical Buffer Overflow RCE
Buffer overflow in Synology BeeStation OS AdminCenter lets unauthenticated attackers execute code remotely (CVSS 9.8) — patch to 1.3.2-65648 now.
- Security
CVE-2026-45083 — Goobi Viewer Unauthenticated RCE via Solr Streaming Expression Injection
CVSS 9.8 in Goobi Viewer REST API lets unauthenticated clients inject Solr streaming expressions, enabling RCE on affected digital heritage platforms.
- Security
CVE-2026-44444: Lumiverse AI Plugin Install Scripts Enable RCE (CVSS 9.1)
Critical Lumiverse <0.9.7 flaw lets malicious extensions execute arbitrary code via package.json lifecycle scripts run by the Spindle build pipeline.
- Security
CVE-2026-45247 — Mirasvit Magento 2 Cache Warmer PHP Object Injection RCE
CVSS 9.8 PHP object injection in Mirasvit Full Page Cache Warmer for Magento 2 lets unauthenticated attackers achieve RCE — patch to 1.11.12 now.
- Security
CVE-2026-8450: HTTP::Daemon Perl OS Command Injection via send_file()
OS command injection (CVSS 9.1) in Perl's HTTP::Daemon lets attackers run arbitrary commands via magic prefix abuse in send_file's two-arg open().
- News
Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell
A hardcoded machineKey value in KnowledgeDeliver's configuration enabled ViewState deserialization attacks leading to remote code execution and web shell.
- News
KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web
Attackers exploited a critical zero-day vulnerability in KnowledgeDeliver LMS servers to deploy the Godzilla web shell, giving persistent backdoor access to.
- News
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across
Microsoft has released updates fixing CVE-2026-45659, a CVSS 8.8 remote code execution vulnerability in SharePoint Server that requires no specialized.
- Newsletter
May 26 Digest: SharePoint RCE, Megalodon CI/CD Blitz
Microsoft patches a CVSS 8.8 SharePoint RCE; the Megalodon campaign poisons 5,561 GitHub repos in six hours; 7-Eleven's ShinyHunters breach hits 185,000; and a.
- Security
CVE-2026-34910 — UniFi OS Unauthenticated Command Injection
A CVSS 10.0 command injection vulnerability in UniFi OS allows any network-accessible attacker with no credentials to execute arbitrary OS commands,...
- Security
CVE-2026-48207: Apache Fury PyFury Deserialization RCE
A critical deserialization vulnerability in Apache Fury's Python library PyFury allows attackers to bypass DeserializationPolicy validation hooks via the...
- Security
CVE-2026-5433: Honeywell CNM Critical Command Injection RCE
A CVSS 9.1 critical command injection vulnerability in Honeywell's Control Network Module web interface allows remote attackers to execute arbitrary...
- News
Google Accidentally Exposed Details of Unfixed Chromium Flaw
Google accidentally leaked information about an unpatched Chromium vulnerability that allows JavaScript to continue running in the background even after...
- News
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites
Drupal has released emergency security updates for CVE-2026-9082, a highly critical vulnerability in Drupal Core that allows remote code execution,...
- Security
CVE-2026-33278 — NLnet Labs Unbound DNSSEC Validator RCE
A critical heap-corruption flaw in NLnet Labs Unbound's DNSSEC validator allows denial of service and possible remote code execution. Affects versions...
- Security
CVE-2026-44050 — Netatalk CNID Daemon Heap Buffer Overflow
A heap-based buffer overflow in the Netatalk CNID daemon comm_rcv() function allows a remote authenticated attacker to execute arbitrary code with...
- Security
CVE-2026-24207: NVIDIA Triton Inference Server Auth Bypass
A critical authentication bypass vulnerability in NVIDIA Triton Inference Server could allow unauthenticated attackers to execute code, escalate...
- Security
GlassFish Administration Console Authenticated RCE
An authenticated Remote Code Execution vulnerability in GlassFish's Administration Console (CVSS 9.1) allows users with panel access to execute arbitrary...
- Security
GlassFish Gadget Handler Expression Language RCE
A critical CVSS 9.6 Remote Code Execution vulnerability in GlassFish's server-side gadget handler allows attackers to inject Expression Language...
- Security
CVE-2026-34234 — CtrlPanel Installer Unauthenticated Remote
A CVSS 10.0 RCE vulnerability in CtrlPanel's web-based installer allows unauthenticated attackers to execute arbitrary code by exploiting a logic flaw...
- News
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE
Critical security vulnerabilities in SEPPMail Secure E-Mail Gateway — an enterprise email security appliance — could allow attackers to achieve remote...
- Security
CVE-2026-25244 — WebdriverIO Command Injection RCE via Git
A command injection vulnerability in WebdriverIO below version 9.24.0 allows remote code execution through malicious git branch names containing shell...
- Security
CVE-2026-27130 — Dokploy OS Command Injection via appName
Dokploy versions 0.26.6 and below contain a critical OS command injection vulnerability in the appName parameter, enabling unauthenticated remote code...
- Security
CVE-2026-7301: SGLang ROUTER Socket Exposes Unsafe
A critical CVSS 9.8 vulnerability in SGLang's multimodal AI runtime scheduler binds its ROUTER socket to 0.0.0.0 by default and passes incoming messages...
- Security
CVE-2026-8838 — Amazon Redshift Python Driver RCE via Unsafe Code Execution
The Amazon Redshift Python driver before version 2.1.14 contains a critical vulnerability where the vector_in() function executes arbitrary code received...
- Security
CVE-2018-25320: ACL Analytics Arbitrary Code Execution via EXECUTE Function
ACL Analytics versions 11.x through 13.0.0.579 contain a critical arbitrary code execution vulnerability (CVSS 9.8) allowing attackers to run arbitrary OS...
- Security
CVE-2026-8507: Crypt::OpenSSL::PKCS12 Heap OOB Write — CVSS
A critical heap out-of-bounds write vulnerability in Crypt::OpenSSL::PKCS12 for Perl (versions through 1.94) can be triggered by parsing a malformed...
- Security
CVE-2026-41258: OpenMRS Velocity Template Injection Enables
A critical unsandboxed Apache Velocity template injection vulnerability in OpenMRS Core allows authenticated attackers to execute arbitrary code on the...
- News
18-Year-Old NGINX Rewrite Module Flaw Enables
Researchers have disclosed multiple critical vulnerabilities in NGINX Plus and NGINX Open Source, including a heap buffer overflow in...
- News
18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE
An autonomous scanning system has uncovered an 18-year-old flaw in the NGINX open-source web server that can be exploited for denial of service and, under...
- Security
CVE-2026-44377: CubeCart Authenticated SSTI via Smarty
An authenticated Server-Side Template Injection vulnerability in CubeCart prior to 6.7.0 allows attackers with API key access to execute arbitrary code...
- Security
CVE-2026-45053: CubeCart REST API Arbitrary PHP File Upload
A critical arbitrary file upload vulnerability in CubeCart's REST API File Manager allows holders of a files:rw API key to upload PHP webshells to the web...
- News
Microsoft May 2026 Patch Tuesday Fixes 120 Flaws, No
Microsoft's May 2026 Patch Tuesday delivers security updates for 120 vulnerabilities across Windows, Edge, Office, Azure, and more — with no zero-days...
- News
Microsoft Patches 138 Vulnerabilities Including DNS and Netlogon RCE Flaws
Microsoft's May 2026 Patch Tuesday addresses 138 security vulnerabilities across its product portfolio, including 30 rated Critical — with notable DNS...
- News
New Critical Exim Mailer Flaw Allows Remote Code Execution
A critical vulnerability in certain configurations of the Exim open-source mail transfer agent allows unauthenticated remote attackers to execute...
- News
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
Exim has released security updates to patch a severe vulnerability affecting GnuTLS-compiled builds of the world's most widely deployed mail transfer...
- News
Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator
Fortinet has released emergency security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to...
- Security
CVE-2026-34263 — SAP Commerce Cloud Unauthenticated RCE
A critical unauthenticated remote code execution vulnerability in SAP Commerce Cloud allows any unauthenticated user to upload malicious configurations...
- News
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation
Ivanti has disclosed a high-severity improper input validation vulnerability in Endpoint Manager Mobile (EPMM) that is being actively exploited in the...
- News
PAN-OS RCE Exploit Under Active Use Enabling Root Access
Palo Alto Networks has disclosed that CVE-2026-0300, a critical CVSS 9.3 buffer overflow in the PAN-OS User-ID Authentication service, is being actively...
- Security
CVE-2026-41500: electerm macOS Command Injection via Install Script
A critical command injection vulnerability in the electerm terminal client allows remote attackers to achieve unauthenticated code execution on macOS...
- Security
CVE-2026-41501: electerm Linux Command Injection via Install Script
A critical command injection flaw in electerm's Linux installer allows remote attackers to execute arbitrary shell commands by injecting into unsanitized...
- News
EnOcean SmartServer Flaws Expose Buildings to Remote Hacking
Claroty researchers have disclosed two vulnerabilities in the EnOcean SmartServer IQ building management controller that can be chained for security...
- Security
Apache MINA Incomplete Deserialization Patch Leaves 2.1.X
Apache MINA versions 2.1.X and 2.2.X remain vulnerable to unauthenticated remote code execution because the fix for CVE-2026-41409 was never backported,...
- Security
Critical Stack-Based Buffer Overflow in Totolink NR1800X
A critical CVSS 9.8 stack-based buffer overflow in the Totolink NR1800X router's lighttpd component allows unauthenticated remote code execution via a...
- News
Critical Gemini CLI Flaw Enabled Host Code Execution
A critical vulnerability in Google's Gemini CLI allowed an attacker to plant a malicious configuration file that executed commands outside the sandbox,...
- Security
CVE-2026-36841: TOTOLINK N200RE V5 Command Injection
A critical CVSS 9.8 command injection vulnerability in TOTOLINK N200RE V5 allows unauthenticated remote code execution via the macstr and bandstr...
- News
Critical GitHub Vulnerability Exposed Millions of Repositories
A critical remote code execution vulnerability, CVE-2026-3854, was found to impact GitHub.com and GitHub Enterprise Server, potentially exposing millions...
- News
GitHub Fixes RCE Flaw That Gave Access to Millions of Private Repos
GitHub has patched CVE-2026-3854, a critical remote code execution vulnerability exploitable via a single HTTP request that could have granted attackers...
- News
Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining
Threat actors are actively exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptomining...
- Security
CVE-2024-1708: ConnectWise ScreenConnect Path Traversal
ConnectWise ScreenConnect contains a path traversal vulnerability (CVE-2024-1708) that allows attackers to execute remote code or directly access...
- Security
Snap One WattBox 800/820 Diagnostic Auth Bypass
A CVSS 9.8 critical vulnerability in Snap One WattBox 800 and 820 series firmware exposes undisclosed diagnostic HTTP endpoints protected only by the...
- News
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
Cybersecurity researchers have disclosed CVE-2026-25874, a critical unauthenticated remote code execution vulnerability (CVSS 9.3) in Hugging Face's...
- News
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw
Cybersecurity researchers have disclosed a critical remote code execution vulnerability in GitHub.com and GitHub Enterprise Server that allows an...
- Security
CVE-2026-30352: Remote Code Execution in leonvanzyl
A critical remote code execution vulnerability in the /devserver/start endpoint of the leonvanzyl autocoder AI coding tool allows unauthenticated...
- Security
CVE-2026-40453: Apache Camel Header Filter Case-Variant
A critical incomplete fix in Apache Camel leaves five non-HTTP HeaderFilterStrategy implementations vulnerable to case-variant header injection, allowing...
- Security
CVE-2026-40860: Apache Camel JMS Unsafe ObjectMessage
Apache Camel's JmsBinding class in camel-jms and camel-sjms deserializes incoming JMS ObjectMessage payloads via javax.jms.ObjectMessage.getObject()...
- Security
CVE-2026-41635: Apache MINA Class Allowlist Bypass Enables
Apache MINA's AbstractIoBuffer.resolveClass() contains a branch for static classes and primitive types that skips allowlist validation entirely, letting...
- Security
CVE-2026-7136: Totolink A8000RU OS Command Injection via setDmzCfg
A critical OS command injection vulnerability in the Totolink A8000RU router allows remote attackers to execute arbitrary commands by manipulating the...
- Security
CVE-2026-7154: Totolink A8000RU OS Command Injection via CGI Handler
A critical unauthenticated OS command injection vulnerability in the Totolink A8000RU router firmware 7.1cu.643_b20200521 allows remote attackers to...
- Newsletter
Apr 28 Digest: Medtronic 9M Breach, GitHub RCE, LiteLLM
ShinyHunters hits Medtronic and ADT in the same week, exposing millions of records; a critical one-push RCE lands in GitHub; LiteLLM's pre-auth SQL...
- Security
CVE-2026-6786: Memory Safety Bugs in Firefox and Thunderbird
Multiple memory safety bugs in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird ESR 140.9 carry a CVSS 8.1 High rating. Some bugs show...
- Security
CVE-2026-6951: simple-git RCE via --config Option Bypass
A critical remote code execution vulnerability in the simple-git npm package allows attackers to inject arbitrary git config options via the --config...
- Security
Pipecat AI Framework RCE via LivekitFrameSerializer
A critical vulnerability in Pipecat's optional LivekitFrameSerializer class allows unauthenticated remote code execution in the popular AI voice agent...
- Security
Kofax Capture Unauthenticated RCE via Exposed .NET Remoting
A critical unauthenticated RCE vulnerability in Kofax Capture (Tungsten Capture) exposes a deprecated .NET Remoting HTTP channel on port 2424 with no...
- Security
CVE-2026-26210: KTransformers Unsafe Deserialization RCE
KTransformers through version 0.5.3 contains a critical unsafe deserialization vulnerability in its balance_serve backend mode, where an unauthenticated...
- Security
CVE-2026-6942: radare2-mcp OS Command Injection via Shell
A critical OS command injection vulnerability in radare2-mcp 1.6.0 and earlier allows remote attackers to execute arbitrary commands by bypassing the...
- Security
CVE-2026-39987: Marimo Pre-Auth Remote Code Execution
A critical pre-authorization remote code execution vulnerability in Marimo, the open-source reactive Python notebook, allows unauthenticated attackers to...
- Security
CVE-2026-41228 — Froxlor Path Traversal via def_language
A critical path traversal vulnerability in Froxlor's Customers.update and Admins.update API endpoints allows authenticated low-privilege users to traverse...
- Security
CVE-2026-41229 — Froxlor PHP Code Injection via MySQL
A critical PHP code injection vulnerability in Froxlor allows an admin with change_serversettings permission to inject arbitrary PHP code via unescaped...
- News
New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability in end-of-life D-Link DIR-823X...
- Security
CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0
A stack overflow vulnerability in Perl's Storable module (versions before 3.05) stems from a signed/unsigned integer mismatch in retrieve_hook(), enabling...
- Security
CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs
A critical CVSS 9.8 uninitialized memory vulnerability in Firefox and Thunderbird's Audio/Video Web Codecs component allows remote code execution. Update...
- Security
CVE-2026-32604: Spinnaker Clouddriver Remote Code Execution
A critical unauthenticated RCE vulnerability in Spinnaker's clouddriver service allows attackers to execute arbitrary commands on clouddriver pods,...
- Security
CVE-2026-32613: Spinnaker Echo Spring Expression Language
A critical code injection flaw in Spinnaker's Echo service allows unrestricted Spring Expression Language (SPeL) execution via artifact processing,...
- Security
CVE-2026-39918: Vvveb CMS Unauthenticated PHP Code
Vvveb CMS versions prior to 1.0.8.1 allow unauthenticated attackers to inject arbitrary PHP code through the installation endpoint's unsanitized subdir...
- News
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious
A critical CVSS 9.8 command injection vulnerability in the SGLang AI inference framework allows attackers to achieve remote code execution by supplying a...
- Security
CVE-2026-32956: Critical Heap Buffer Overflow in silex
silex technology SD-330AC and AMC Manager contain a CVSS 9.8 heap-based buffer overflow in redirect URL processing. Unauthenticated attackers can execute...
- News
Adobe Patches Actively Exploited Zero-Day That Lingered for Months
Adobe has patched an actively exploited zero-day in Acrobat and Reader that threat actors have been weaponizing via malicious PDF files since at least...
- News
Critical Flaw in protobuf.js Library Enables JavaScript
A critical remote code execution vulnerability in protobuf.js, the widely used JavaScript implementation of Google's Protocol Buffers, has been disclosed...
- News
Recent Apache ActiveMQ Vulnerability Exploited in the Wild
CVE-2026-34197, a remote code execution vulnerability in Apache ActiveMQ's Jolokia management API, is being actively exploited in the wild. CISA has added...
- News
Orthanc DICOM Vulnerabilities Lead to Crashes, RCE
Multiple vulnerabilities in the widely-used Orthanc open-source DICOM server expose medical imaging systems to denial-of-service, information disclosure,...
- Security
CVE-2026-34621: Adobe Acrobat Reader Prototype Pollution
Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by a critical prototype pollution vulnerability (CWE-1321) that can lead...
- Security
CVE-2026-6057: FalkorDB Browser Unauthenticated Path
FalkorDB Browser 1.9.3 contains a critical unauthenticated path traversal vulnerability in its file upload API that allows remote attackers to write...
- News
13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute
Security researchers discovered a remote code execution vulnerability in Apache ActiveMQ Classic that went undetected for 13 years, allowing attackers to...
- Security
CVE-2026-1340: Ivanti EPMM Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the Android File Transfer module allowing unauthenticated remote code...
- Security
CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer
A critical heap-based buffer overflow in LibRaw's x3f_thumb_loader allows an attacker to trigger memory corruption via a specially crafted RAW image file,...
- Security
CVE-2026-20911: LibRaw HuffTable::initval Heap Buffer
A critical heap-based buffer overflow in LibRaw's HuffTable::initval function allows an attacker to corrupt heap memory via a malicious RAW image file,...
- Security
CVE-2026-21413: LibRaw lossless_jpeg_load_raw Heap Buffer
A critical heap-based buffer overflow in LibRaw's lossless_jpeg_load_raw function allows an attacker to cause memory corruption and potential code...
- News
Hackers Exploit Critical Flaw in Ninja Forms WordPress
Attackers are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the Ninja Forms File Uploads premium add-on for...
- Security
CVE-2026-26026: GLPI Template Injection Enables
GLPI versions 11.0.0 through 11.0.5 contain a server-side template injection vulnerability in the administrator interface that allows authenticated admins...
- Security
CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables
A critical authentication bypass in Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 allows unauthenticated remote attackers to...
- News
New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE
Two newly disclosed vulnerabilities in Progress ShareFile can be chained together to enable unauthenticated remote code execution and file exfiltration,...
- News
Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE
Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks exploiting a critical-severity...
- Security
CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig
A critical CVSS 9.8 buffer overflow in TOTOlink A3600R v5.9c.4959 allows remote attackers to exploit the rootSsid parameter in the setAppEasyWizardConfig...
- News
Claude AI Finds Vim and Emacs RCE Bugs That Trigger on File
Anthropic's Claude AI assistant discovered remote code execution vulnerabilities in both Vim and GNU Emacs text editors using simple security research...
- News
F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under
CVE-2025-53521, initially disclosed as a high-severity denial-of-service flaw in F5 BIG-IP APM, has been reclassified as a remote code execution...
- News
Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks
F5 has reclassified a BIG-IP APM vulnerability from denial-of-service to critical remote code execution, warning that attackers are actively exploiting...
- Security
CVE-2025-15379: MLflow Command Injection in Model Serving
A maximum-severity command injection vulnerability in MLflow's model serving container initialization allows attackers to execute arbitrary OS commands...
- Security
CVE-2026-27876 — Grafana Critical RCE via SQL Expression
A chained attack exploiting SQL Expressions combined with a Grafana Enterprise plugin can lead to remote arbitrary code execution. All Grafana users...
- Security
CVE-2025-53521: F5 BIG-IP APM Remote Code Execution — CISA
A critical unauthenticated RCE vulnerability in F5 BIG-IP APM is being actively exploited in the wild. Malicious traffic targeting access policy virtual...
- News
PolyShell Attacks Target 56% of All Vulnerable Magento
Mass exploitation is underway against Magento 2 and Adobe Commerce installations using the 'PolyShell' polyglot file upload vulnerability, with attackers...
- News
PTC Warns of Imminent Threat from Critical Windchill
PTC is warning customers of an imminent exploit threat against a critical deserialization vulnerability in Windchill and FlexPLM — CVE-2026-4681, CVSS...
- Security
CVE-2026-33478: AVideo CloneSite Plugin Unauthenticated RCE
A critical chain of vulnerabilities in WWBN AVideo's CloneSite plugin allows fully unauthenticated attackers to achieve remote code execution via key...
- Security
Tenda A15 UploadCfg Stack Buffer Overflow (CVE-2026-4567)
A CVSS 9.8 Critical stack-based buffer overflow in Tenda A15 firmware 15.13.07.13 allows unauthenticated remote attackers to execute arbitrary code by...
- Security
D-Link DHP-1320 SOAP Handler Stack Buffer Overflow
A CVSS 8.8 stack-based buffer overflow in D-Link DHP-1320 firmware 1.00WWB04 allows unauthenticated remote attackers to execute arbitrary code via a...
- Security
CVE-2025-54068: Laravel Livewire Code Injection
A critical code injection vulnerability in Laravel Livewire v3 allows unauthenticated remote attackers to execute arbitrary commands. Over 130,000...
- News
Oracle Pushes Emergency Fix for Critical Identity Manager
Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Oracle Identity Manager and...
- Security
CVE-2025-32432: Craft CMS Code Injection Vulnerability
A critical code injection vulnerability in Craft CMS allows unauthenticated remote attackers to execute arbitrary code on affected servers. Added to...
- Security
CVE-2026-21992: Critical Oracle Identity Manager
Oracle's March 2026 Critical Patch Update includes CVE-2026-21992, a CVSS 9.8 unauthenticated remote code execution vulnerability in Oracle Identity...
- Security
CVE-2026-32238: Critical Command Injection in OpenEMR
OpenEMR versions prior to 8.0.0.2 contain a CVSS 9.1 command injection vulnerability in the backup functionality. Authenticated attackers with high...
- Security
CVE-2026-25449: Critical Object Injection in Shinetheme
A CVSS 9.8 deserialization vulnerability in the Shinetheme Traveler WordPress plugin allows unauthenticated remote attackers to inject arbitrary PHP...
- News
Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746)
Researchers have disclosed a critical unauthenticated remote code execution vulnerability in the GNU InetUtils telnet daemon (telnetd). CVE-2026-32746...
- Security
CVE-2026-21994: Critical Unauthenticated RCE in Oracle Edge
A critical unauthenticated remote code execution vulnerability (CVSS 9.8) in Oracle's Edge Cloud Infrastructure Designer and Visualisation Toolkit allows...
- Security
CVE-2026-25769: Wazuh Critical RCE via Insecure
A critical remote code execution vulnerability (CVSS 9.1) in Wazuh versions 4.0.0–4.14.2 allows an attacker with access to a worker node to achieve root...
- News
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable
Security researchers disclosed critical flaws across three major AI platforms: Amazon Bedrock AgentCore's sandbox can be bypassed via DNS to exfiltrate...
- News
CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits
CISA added CVE-2025-47813 to its Known Exploited Vulnerabilities catalog on March 16, warning that the medium-severity path disclosure flaw is being...
- News
Microsoft Releases Windows 11 OOB Hotpatch to Fix Three
Microsoft has pushed an out-of-band hotpatch (KB5084597) to Windows 11 Enterprise devices to address three integer-overflow RCE flaws in RRAS, one rated...
- News
OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click
China's CNCERT has warned that OpenClaw (formerly Clawdbot/Moltbot), the viral self-hosted AI agent, carries over 250 disclosed vulnerabilities including...
- News
Veeam Patches Five Critical RCE Vulnerabilities Exposing
Veeam Software has released a critical security update for Backup & Replication, patching five remote code execution vulnerabilities with CVSS scores...
- Security
Veeam Backup & Replication Auth RCE — CVE-2026-21666
A critical remote code execution vulnerability in Veeam Backup & Replication allows any authenticated domain user to execute arbitrary code on the Backup...
- Security
Veeam Backup & Replication 2nd Auth RCE — CVE-2026-21667
A second critical remote code execution vulnerability in Veeam Backup & Replication lets any authenticated domain user execute code on the Backup Server,...
- Security
Critical RCE in Veeam Backup & Replication — Third Domain
A third concurrent critical RCE vulnerability in Veeam Backup & Replication enables domain-authenticated attackers to execute code on the Backup Server,...
- Security
Critical RCE in Veeam Backup & Replication HA Deployments
A critical RCE vulnerability in Veeam Backup & Replication high-availability deployments allows users with the Backup Administrator role to execute...
- Security
Critical RCE in Veeam Backup & Replication — Backup Viewer
A critical CVSS 9.9 vulnerability in Veeam Backup & Replication allows users with the lowest-privileged Backup Viewer role to execute arbitrary code as...
- News
CISA Flags Actively Exploited n8n RCE Bug as 24,700
CISA added CVE-2025-68613 — a CVSS 9.9 remote code execution flaw in n8n's workflow expression evaluator — to its Known Exploited Vulnerabilities catalog...
- News
CISA Orders Federal Agencies to Patch n8n RCE Flaw
CISA mandated all federal civilian agencies patch CVE-2025-68613, a CVSS 9.9 remote code execution flaw in the n8n workflow automation platform, after...
- News
Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft
Security researchers have published details of two newly patched critical vulnerabilities in n8n — CVE-2026-27577 (CVSS 9.4), an expression sandbox escape...
- Security
CVE-2025-68613: n8n Remote Code Execution via Improper
CISA adds CVE-2025-68613 to the Known Exploited Vulnerabilities catalog — a CVSS 9.9 flaw in n8n's workflow expression evaluation system that enables...
- Security
Critical RCE in Hitachi Vantara Pentaho via Unrestricted
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 fail to restrict Groovy scripts in PRPT reports, allowing privileged users...
- Security
Critical Stack-Based Buffer Overflow in Delta Electronics
A critical CVSS 9.8 stack-based buffer overflow in Delta Electronics COMMGR2 allows unauthenticated remote code execution, posing severe risk to...
- Security
CVE-2026-28775: Unauthenticated Root RCE in IDC SFX
A critical unauthenticated RCE vulnerability in International Datacasting Corporation's SFX Series satellite receivers allows attackers to execute...
- Security
Mail2Shell: Zero-Click RCE in FreeScout Helpdesk
A maximum-severity zero-click vulnerability dubbed Mail2Shell allows unauthenticated attackers to compromise FreeScout mail servers by simply sending a...
- Security
CISA Adds Actively Exploited VMware Aria Operations RCE
CISA has added CVE-2026-22719, a high-severity command injection vulnerability in VMware Aria Operations allowing unauthenticated remote code execution,...
- Security
BeyondTrust Remote Support and PRA Critical RCE Under
A critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support and Privileged Remote Access is under active exploitation,...
- Security
Critical RCE in Microsoft Semantic Kernel Python SDK
A maximum-severity code injection vulnerability in Microsoft's Semantic Kernel Python SDK allows authenticated attackers to execute arbitrary code through...
- Security
Critical Grandstream VoIP Vulnerability Allows
A critical CVSS 9.3 stack-based buffer overflow in Grandstream GXP1600 series VoIP phones allows unauthenticated remote code execution, enabling attackers...
- Security
BeyondTrust Remote Support Pre-Authentication RCE Under
A critical pre-authentication OS command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access with CVSS 9.9 is being...
- Security
Cisco Unified Communications Zero-Day Exploited for Root RCE
An actively exploited zero-day in Cisco Unified Communications allows unauthenticated remote code execution with root privileges via crafted HTTP...
- Security
GitHub Copilot Command Injection Flaws Enable Remote Code
Multiple high-severity command injection vulnerabilities discovered in GitHub Copilot extensions for VS Code, Visual Studio, and JetBrains could allow...
- Security
Critical RCE in WPvivid Backup Plugin Threatens 900,000+
A critical unauthenticated arbitrary file upload vulnerability in the WPvivid Backup & Migration plugin allows remote code execution on over 900,000...
- Security
BeyondTrust Zero-Day Allows Unauthenticated Command
A critical zero-day in BeyondTrust Remote Support and Privileged Remote Access enables unauthenticated command execution, potentially compromising entire...
- Security
Critical PAN-OS GlobalProtect Gateway RCE Vulnerability
A critical unauthenticated remote code execution vulnerability in Palo Alto Networks PAN-OS GlobalProtect gateway allows complete firewall takeover. CVSS 9.8.
- Security
Fortinet FortiOS SSL VPN Heap Overflow Enables Pre-Auth RCE
Fortinet patches a critical heap-based buffer overflow in FortiOS SSL VPN that allows unauthenticated remote code execution on FortiGate appliances....
- Security
Eight Critical n8n Vulnerabilities: Sandbox Escape to Unauthenticated RCE
Popular workflow automation platform n8n hit with eight high-to-critical CVEs including a CVSS 10.0 unauthenticated RCE and sandbox escape bypassing...
- Security
Apache Struts Critical RCE via OGNL Injection Returns
A new critical OGNL injection vulnerability in Apache Struts allows unauthenticated remote code execution, reminiscent of the 2017 Equifax breach vector....
- Security
Critical Fortinet FortiClientEMS SQL Injection
Fortinet patches a CVSS 9.8 SQL injection in FortiClientEMS 7.4.4 allowing unauthenticated remote code execution. Endpoint management servers across...
- Security
Microsoft Exchange Server SSRF to RCE Chain Actively
A server-side request forgery vulnerability in Exchange Server is being chained with deserialization flaws for unauthenticated remote code execution....
- Security
SolarWinds Web Help Desk RCE Vulnerability Added to CISA KEV
Critical deserialization vulnerability in SolarWinds Web Help Desk enables unauthenticated remote code execution. CISA confirms active exploitation.
- Security
Critical Google Looker Vulnerabilities Allow Full System
Two severe vulnerabilities in Google Looker, dubbed 'LookOut', could allow attackers to gain complete control of self-hosted deployments affecting 60,000+...
- Security
Critical n8n Vulnerability (CVSS 10.0) Enables Complete
A maximum-severity flaw dubbed 'Ni8mare' in the popular workflow automation platform n8n allows unauthenticated attackers to gain full control of...
- News
Cisco Patches Critical Webex Vulnerability Allowing Remote
Cisco has released emergency patches for a critical vulnerability in Webex that could allow unauthenticated remote code execution. Organizations urged to...
- Security
Critical D-Link Router RCE Under Active Exploitation - No
CVE-2026-0625 allows unauthenticated remote code execution on legacy D-Link DSL routers. Devices are end-of-life with no patches forthcoming. Immediate...