#Remote Code Execution
All CosmicBytez Labs articles tagged #Remote Code Execution, across news, security advisories, how-to guides, and projects.
- News
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal fixed CVE-2026-108097, a critical Field UI RCE (risk 19/25), in 11.4.10, 11.3.19 and 10.6.19 — unauthenticated via contributed modules.
- Security
CVE-2026-108587: Unauthenticated Arbitrary File Upload in 10Web Booster Leads to RCE
A leaked REST nonce lets unauthenticated attackers upload executable files via 10Web Booster's compressCustom function, enabling full RCE.
- Security
CVE-2026-104800: Unauthenticated RCE in AGE-GATE WordPress Plugin
A critical 9.8 CVSS flaw lets unauthenticated attackers execute arbitrary code on WordPress sites via AGE-GATE's exposed admin.php endpoint.
- Security
CVE-2026-103522: Thelia Store Banner Upload Remote Code Execution
Thelia's store banner upload feature trusts client-supplied MIME types, letting an admin-level attacker disguise a PHP webshell as an image.
- News
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
CVE-2026-85097 (CVSS 10.0), a critical flaw in the Bricksforge WordPress plugin, is under active exploitation enabling unauthenticated RCE.
- Security
CVE-2026-104028: Unrestricted File Upload in Anton Extensions Risks Full Site Takeover
Anton Extensions ≤ 1.2.2 skips capability, nonce, and file-type checks, letting unauthenticated attackers upload PHP shells for RCE.
- Security
CVE-2026-103889: Unauthenticated RCE in 3D Product Configurator for WooCommerce
An unauthenticated attacker can POST a malicious xpv_image payload to the WooCommerce 3D Product Configurator plugin for RCE (CVSS 9.8).
- Security
CVE-2026-108263: Astron Agent Unsandboxed Workflow Code Execution
An insecure default in Astron Agent lets authenticated tenants run unsandboxed code as root, enabling cross-tenant data access and RCE (CVSS 9.9).
- Security
CVE-2026-94589: Extensions For CF7 Unauthenticated Arbitrary File Upload to RCE
An unauthenticated attacker can upload a disguised shell.php through Extensions For CF7's signature field, leading to remote code execution (CVSS 9.8).
- Security
CVE-2026-107779: Dromara Skyeye Unauthenticated RCE via Bundled xxl-job-admin
Unauthenticated POSTs to Skyeye's bundled xxl-job-admin let attackers run arbitrary GLUE_SHELL, GLUE_PYTHON, or GLUE_POWERSHELL jobs for remote code execution.
- Security
CVE-2026-107780: Unauthenticated OS Command Injection in Dromara Skyeye TTS Endpoint
Unauthenticated OS command injection in Dromara Skyeye's TTS endpoint lets attackers break out of a PowerShell string via the format parameter for RCE.
- Security
CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
CISA added this 2021 ONLYOFFICE Docs path traversal (CVSS 9.8) to its KEV catalog on Oct 8, 2026, confirming active RCE exploitation.
- Security
CVE-2026-76268: Splunk Enterprise Patroni REST API Unauthenticated RCE
An unauthenticated network attacker can run OS commands via Splunk's Patroni REST API on search head cluster members. CVSS 9.8.
- Security
CVE-2025-70518, CVE-2025-70521, CVE-2025-70516: Fanvil X7A Firmware Unauthenticated Command Injection and Access Control Bypass
Three critical Fanvil X7A VoIP phone firmware flaws allow unauthenticated remote code execution and device data exposure.
- Security
CVE-2026-105697: Langflow MCP Stdio RCE — Incomplete Fix Reopens Remote Code Execution
Langflow's 1.9.0 MCP Stdio RCE fix was incomplete — the same bash -c exec flaw stayed reachable until 1.10.3, which removed the shell entirely.
- Security
CVE-2026-105740: Langflow Authenticated RCE via MCP Stdio Transport
Authenticated Langflow users could run arbitrary OS commands by adding a malicious MCP Stdio server; the command hit bash -c exec unsanitized.
- Security
CVE-2026-88391: Northstar H2 Console Exposed with Default Credentials Enables RCE
Northstar (dromara/northstar) exposes an unauthenticated H2 Console with default sa credentials, allowing network attackers to run SQL and achieve RCE.
- News
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Hackers are exploiting CVE-2026-61500, a critical weak-PRNG flaw in Rejetto HFS that forges admin session cookies and leads to full RCE.
- Security
CVE-2026-105123: wcms Media Upload API Remote Code Execution
Authenticated wcms editors can abuse the media upload API to write .php files and traverse paths, achieving remote code execution.
- Security
CVE-2026-105134: AhsayCBS Replication Receiver OS Command Injection
A maximum-severity command injection flaw in AhsayCBS's Replication Receiver API lets attackers run arbitrary OS commands remotely.
- Security
CVE-2026-105135: InternLM MindSearch Planner Agent Code Injection
An unauthenticated code injection flaw in MindSearch's Planner Agent lets remote attackers execute arbitrary code via the /solve endpoint.
- Security
CVE-2026-102489: Zammad Session Fixation Flaw Added to CISA KEV Catalog
CISA added CVE-2026-102489, a Zammad session fixation bug chaining to RCE as the zammad user, to its KEV catalog after active exploitation.
- Security
CVE-2026-70356: Toptech TMS7 and TopHAT Unrestricted File Upload Enables Remote Code Execution
Critical CVSS 9.1 flaw (CWE-434) in Toptech TMS7 and TopHAT v7.6.3 lets a privileged attacker upload and execute PHP web shells; fixed in 7.8.
- News
Citrix Confirms Two NetScaler RCE Zero-Days, Ships Patches as CVE-2026-88771 and CVE-2026-88772
Citrix confirmed and patched two exploited NetScaler RCE zero-days watchTowr warned about a day earlier — August's fixed builds remain vulnerable.
- News
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
watchTowr warns two unconfirmed Citrix NetScaler RCE zero-days are being exploited; Citrix has issued no CVE, patch, or advisory yet.
- Security
CVE-2026-25254: Qualcomm Software Center SocketIO Remote Code Execution
A CVSS 9.8 improper-authorization flaw in Qualcomm Software Center's SocketIO interface lets unauthenticated attackers execute arbitrary code.
- Security
CVE-2026-75799: Unauthenticated Arbitrary PHP File Upload in YAHMAN Add-ons for WordPress
Critical CVSS 9.0 flaw in YAHMAN Add-ons (≤0.9.30) lets unauthenticated attackers cache arbitrary PHP files for RCE. Patched in 0.9.31.
- News
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
CVE-2026-65660 was labeled a low-impact spoofing bug, but full technical details show it enables authenticated remote code execution.
- News
WordPress 'Comment2Shell' Flaw Turns a Blog Comment Into Admin RCE
A parsing gap lets one approved comment auto-execute in an admin's browser, chaining to full remote code execution on the server.
- News
Click2Shell PoC Exploit Code Now Public for Patched WordPress CSRF Flaw
Researcher Paulos Yibelo published full technical details and working exploit code for the WordPress Click2Shell CSRF-to-RCE chain.
- Security
CVE-2026-82187: Unauthenticated Arbitrary File Upload in Web to Print Online Designer
A WooCommerce plugin used by print shops fails to validate uploads and leaks its own protection token, enabling unauthenticated RCE.
- News
Researchers Use AI to Find Widespread Software Decoder Flaw
AI models helped researchers turn a libheif image-decoder bug into RCE, reaching Meta's product suite and an OpenAI code repository.
- News
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
CVE-2026-28326 (CVSS 8.8) is a hard-coded static key in SolarWinds Access Rights Manager, patched in ARM 2026.2.1.
- Security
CVE-2026-77929: Authenticated File Upload Leads to Remote Code Execution in ClipBucket v5
CVSS 8.8 flaw in ClipBucket v5 lets authenticated users upload PHP files disguised as images to the photo endpoint, achieving remote code execution.
- News
New WordPress 'Click2Shell' Flaw Forces Theme Installs, Can Chain to Code Execution
A URL-parsing mismatch lets one link silently install a WordPress theme for a logged-in admin, chainable to critical remote code execution.
- Security
CVE-2026-45140: Chamilo LMS Unauthenticated Remote Code Execution
A CVSS 9.8 flaw in Chamilo LMS's CStudio plugin import flow lets unauthenticated attackers execute arbitrary code on the server.
- News
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
Sysdig traced a human attacker from Marimo RCE to SSH bastion access in 8 seconds: no AI, just hand-built tradecraft.
- Security
CVE-2026-57125: PraisonAI Jobs API Lets Attackers Bypass Command-Execution Approval
Unauthenticated PraisonAI Jobs API lets a forged YAML approve field bypass @require_approval, enabling unauthenticated command execution.
- Security
CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco Secure Email Gateway has a critical, unauthenticated SQL injection (CVSS 9.8) enabling root code execution. CISA KEV-listed as actively exploited.
- News
Check Point Patches Critical VPN Vulnerabilities
CVE-2026-85102 and CVE-2026-85103 (CVSS 9.8) let attackers achieve unauthenticated RCE via Check Point VPN certificate handling.
- News
Attackers Chain Two New Zero-Days in SonicWall's Besieged SMA 1000
CVE-2026-83548 and CVE-2026-83549 chain into unauthenticated RCE on SonicWall SMA 1000 — the fifth SMA 1000 KEV entry since December.
- Security
TOTOLINK A720R Router: Unauthenticated Memory Corruption RCE (CVE-2026-82539)
CVE-2026-82539 (CVSS 9.4) lets remote attackers corrupt memory in TOTOLINK A720R routers via the MAC filtering CGI handler. Public PoC exists.
- News
Critical GiveWP Flaw Lets Hackers Run Server Commands
CVE-2026-82222 chains PHP object injection and an auth-bypass bug in GiveWP, letting attackers run OS commands on 100,000+ WordPress donation sites.
- Security
CVE-2026-19874: Critical Heap Buffer Overflow in Metal Gear Online 3
A critical CVSS 9.1 heap-based buffer overflow in Konami's Metal Gear Online 3 allows remote attackers to execute arbitrary code via malformed lobby data.
- Security
CVE-2026-52490: Critical Code Injection in libtiff tiffcrop
CVSS 9.8 code injection in libtiff's tiffcrop.c allows unauthenticated remote code execution. No patch confirmed; PoC published.
- Security
CVE-2026-10053: GitLab CE/EE Path Traversal Enables Remote Code Execution
A path traversal flaw in GitLab's package registry allows authenticated users to achieve RCE. Affects versions 18.8 through 19.2.1.
- Security
CVE-2026-48749: Incus Malicious Image Arbitrary File Write and RCE (CVSS 9.9)
Critical Incus flaw lets a specially crafted container image read or write arbitrary host files, leading to remote code execution. Fixed in v7.2.0.
- News
Microsoft Entra ID CVSS 10.0 Flaw Exploited in Wild, Allows Remote Code Execution
Microsoft warns of a CVSS 10.0 RCE flaw in Entra ID (CVE-2026-69836) exploited in the wild. No customer action required — Microsoft patched it server-side.
- Security
CVE-2026-76003: Critical Stack Buffer Overflow in UTT HiPER 1200GW
A remotely exploitable stack-based buffer overflow (CVSS 9.9) in UTT HiPER 1200GW routers up to v2.5.3 allows attackers to execute arbitrary code.
- Security
CVE-2026-76004: Critical Stack Buffer Overflow in UTT HiPER 1250GW HTTP Handler
CVSS 9.9 stack buffer overflow in UTT HiPER 1250GW up to v3.2.7 via the pvid parameter in the HTTP handler enables unauthenticated remote code execution.
- Security
CVE-2026-14498: Query Wrangler WordPress Plugin Exposes Sites to RCE
A high-severity RCE flaw (CVSS 8.8) in the Query Wrangler WordPress plugin lets authenticated attackers inject and execute arbitrary PHP via a missing...
- Security
CVE-2026-72819: Grav CMS RCE via ZIP Upload Bypass in Flex Objects Plugin
Grav CMS before 2.0.13 allows authenticated users to achieve RCE by bypassing filename validation with PHP-laden ZIP files.
- Security
CVE-2026-17482: Critical RCE in IBM Documentation Offline
IBM Documentation Offline versions 1.0.0–1.4.1 contain a critical path traversal flaw allowing remote code execution with a CVSS score of 9.8.
- Security
CVE-2026-18948: Feast Feature Store RCE via Unsafe Deserialization
A critical CVSS 9.9 vulnerability in the Feast ML feature store allows unauthenticated remote code execution through malicious user-defined functions...
- Security
CVE-2026-16144: Kali Forms WordPress Plugin Remote Code Execution
The Kali Forms Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution (CVSS 8.1) in all versions up to 2.4.20....
- News
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
Attackers are actively chaining CVE-2026-60137 and CVE-2026-63030 just three days after disclosure, targeting one of the largest attack surfaces on the...
- Security
CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a critical deserialization of untrusted data vulnerability allowing unauthenticated attackers to execute arbitrary code over...
- Security
CVE-2026-47870: VMware Avi Load Balancer Authenticated Remote Code Execution
An authenticated privilege escalation flaw in VMware Avi Load Balancer enables network-connected users to execute remote code. CVSS 7.1 High — all...
- Security
CVE-2026-47867: Remote Code Execution via Code Injection in VMware Avi Load Balancer
A CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer enables high-privileged authenticated attackers to execute arbitrary code on the...
- Security
CVE-2026-47869: Second RCE Code Injection Path in VMware Avi Load Balancer
Broadcom discloses a second CVSS 8.7 code injection vulnerability in VMware Avi Load Balancer. CVE-2026-47869 shares the same vector and impact as...
- Security
CVE-2026-15265: Tenable Agent Path Traversal — Arbitrary File Write & RCE (CVSS 9.1)
A critical path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and earlier allows a privileged attacker to write arbitrary files outside the...
- Security
CVE-2026-52186: Critical SQL Injection RCE in UTT nv518G Router
A critical SQL injection vulnerability (CVSS 9.8) in the UTT nv518G router allows unauthenticated remote attackers to execute arbitrary code via the...
- News
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
CISA has added CVE-2026-12569, a critical remote code execution vulnerability in PTC Windchill PDMlink and FlexPLM, to its Known Exploited Vulnerabilities...
- Security
CVE-2026-12569: PTC Windchill and FlexPLM Remote Code Execution Vulnerability
A critical unauthenticated RCE vulnerability in PTC Windchill and FlexPLM (CVSS 9.3) has been added to CISA's Known Exploited Vulnerabilities catalog,...
- Security
CVE-2026-12485: GeoVision GV-I/O Box 4E UDP Stack Overflow (IP Address Field)
A critical CVSS 10.0 stack-based buffer overflow in the GeoVision GV-I/O Box 4E DVRSearch service allows unauthenticated remote attackers to achieve...
- Security
CVE-2026-12846: GeoVision GV-I/O Box 4E UDP Stack Overflow (Net Mask Field)
A second critical CVSS 10.0 stack-based buffer overflow in GeoVision GV-I/O Box 4E firmware 2.09 — this time in the Net Mask field handling of the...
- News
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Microsoft researchers have detailed AutoJack, a novel exploit chain that turns AI browsing agents into delivery vehicles for remote code execution by...
- News
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
Researchers at Obsidian Security disclosed a chain of three vulnerabilities in the widely deployed LiteLLM open-source AI gateway that allows a default...
- Security
CVE-2026-7654: PHP Object Injection RCE in WordPress Admin Columns Plugin (≤ 7.0.18)
A high-severity PHP Object Injection vulnerability in the Admin Columns WordPress plugin (versions up to 7.0.18) allows authenticated attackers to achieve…
- Security
CVE-2026-49188: ai_cmd Utility Root-Level popen() Injection via Socket Input
A critical CVSS 9.8 vulnerability in the ai_cmd utility executes with full root permissions and pipes socket inputs directly to popen(), enabling…
- Security
CVE-2026-10187: Totolink N300RH Stack Buffer Overflow in WiFi Config
A critical-severity stack buffer overflow in the Totolink N300RH wireless router allows remote attackers to execute arbitrary code via a crafted KeyStr…
- Security
CVE-2018-25412: Arbitrary File Upload RCE in Delta Sql 1.8.2
A critical unauthenticated arbitrary file upload vulnerability in Delta Sql 1.8.2 allows attackers to upload malicious PHP files and achieve remote code...
- Security
CVE-2026-7465: RCE in Spectra Gutenberg Blocks WordPress Plugin (CVSS 8.8)
A high-severity remote code execution vulnerability in the Spectra Gutenberg Blocks plugin for WordPress allows authenticated Contributor-level attackers...
- News
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Rapid7 discloses a critical CVSS 9.4 RCE in Gogs, the popular self-hosted Git service, letting any authenticated user run arbitrary code on the server.
- News
New Gogs Zero-Day Flaw Lets Hackers Get Remote Code Execution
An unpatched Gogs zero-day lets attackers gain RCE on internet-facing instances of the self-hosted Git service — no patch is currently available.
- Security
CVE-2026-45083 — Goobi Viewer Unauthenticated RCE via Solr Streaming Expression Injection
CVSS 9.8 in Goobi Viewer REST API lets unauthenticated clients inject Solr streaming expressions, enabling RCE on affected digital heritage platforms.
- Security
CVE-2026-45247 — Mirasvit Magento 2 Cache Warmer PHP Object Injection RCE
CVSS 9.8 PHP object injection in Mirasvit Full Page Cache Warmer for Magento 2 lets unauthenticated attackers achieve RCE — patch to 1.11.12 now.
- News
Drupal Patches Highly Critical Vulnerability Exposing
Drupal has released an urgent security update for CVE-2026-9082, a highly critical flaw that can be exploited without authentication to achieve...
- News
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites
Drupal has released emergency security updates for CVE-2026-9082, a highly critical vulnerability in Drupal Core that allows remote code execution,...
- Security
CVE-2026-33278 — NLnet Labs Unbound DNSSEC Validator RCE
A critical heap-corruption flaw in NLnet Labs Unbound's DNSSEC validator allows denial of service and possible remote code execution. Affects versions...
- Security
CVE-2026-44050 — Netatalk CNID Daemon Heap Buffer Overflow
A heap-based buffer overflow in the Netatalk CNID daemon comm_rcv() function allows a remote authenticated attacker to execute arbitrary code with...
- Security
CVE-2026-6279: Avada Builder Unauthenticated RCE via PHP
A critical CVSS 9.8 vulnerability in the Avada Builder (fusion-builder) WordPress plugin allows unauthenticated attackers to execute arbitrary PHP...
- Security
GlassFish Administration Console Authenticated RCE
An authenticated Remote Code Execution vulnerability in GlassFish's Administration Console (CVSS 9.1) allows users with panel access to execute arbitrary...
- Security
GlassFish Gadget Handler Expression Language RCE
A critical CVSS 9.6 Remote Code Execution vulnerability in GlassFish's server-side gadget handler allows attackers to inject Expression Language...
- Security
CVE-2026-34234 — CtrlPanel Installer Unauthenticated Remote
A CVSS 10.0 RCE vulnerability in CtrlPanel's web-based installer allows unauthenticated attackers to execute arbitrary code by exploiting a logic flaw...
- News
Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator
Fortinet has released emergency security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to...
- News
SAP Fixes Critical Vulnerabilities in Commerce Cloud and S/4HANA
SAP's May 2026 Security Patch Day addresses 15 vulnerabilities across multiple enterprise products, including two critical-severity flaws in Commerce...
- Security
CVE-2026-34263 — SAP Commerce Cloud Unauthenticated RCE
A critical unauthenticated remote code execution vulnerability in SAP Commerce Cloud allows any unauthenticated user to upload malicious configurations...
- Security
CVE-2021-47933: WordPress MStore API 2.0.6 Arbitrary File
MStore API 2.0.6 for WordPress allows unauthenticated attackers to upload arbitrary PHP files via the REST API config_file endpoint, achieving remote code...
- Security
CVE-2021-47936: OpenCATS 0.9.4 Unauthenticated RCE via PHP
OpenCATS 0.9.4 allows unauthenticated attackers to upload malicious PHP files through the careers job application endpoint, achieving remote code...
- Security
CVE-2026-6433: WordPress Plugin SQLi Enables
The Custom css-js-php WordPress plugin through version 2.0.7 fails to sanitize user input before using it in a SQL query, and passes the result to dynamic...
- News
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS
The Apache Software Foundation has released urgent security updates for the Apache HTTP Server addressing a severe vulnerability in the HTTP/2 protocol...
- News
Ollama Out-of-Bounds Read Flaw Allows Remote Process Memory
Researchers have disclosed a critical out-of-bounds read vulnerability in Ollama that enables remote unauthenticated attackers to leak the entire process...
- News
Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks
Ivanti has issued an urgent advisory warning customers to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) that...
- Security
CVE-2026-33109: Azure Managed Instance for Apache Cassandra
A critical improper access control flaw in Azure Managed Instance for Apache Cassandra allows an authorized network attacker to execute arbitrary code,...
- Security
CVE-2026-4882: Unauthenticated File Upload in WordPress
A critical unauthenticated arbitrary file upload vulnerability in the User Registration Advanced Fields plugin for WordPress allows attackers to upload...
- News
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw
Cybersecurity researchers have disclosed a critical remote code execution vulnerability in GitHub.com and GitHub Enterprise Server that allows an...
- Security
CVE-2026-6885: Borg SPM 2007 Arbitrary File Upload Enables
A critical arbitrary file upload vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated attackers to upload web shell backdoors...
- Security
CVE-2018-25270: ThinkPHP 5.0.23 Remote Code Execution via Routing Parameter
ThinkPHP 5.0.23 contains a critical unauthenticated remote code execution vulnerability allowing attackers to invoke arbitrary PHP functions via a crafted...
- Security
CVE-2018-25272: ELBA5 5.8.0 RCE via Default Database
ELBA5 5.8.0 contains a critical remote code execution vulnerability where default database connector credentials allow attackers to connect to the...
- Security
CVE-2026-3844 — Breeze Cache WordPress Plugin
A critical unauthenticated file upload vulnerability in the Breeze Cache WordPress plugin allows attackers to upload arbitrary files to affected servers...
- Security
CVE-2026-41228 — Froxlor Path Traversal via def_language
A critical path traversal vulnerability in Froxlor's Customers.update and Admins.update API endpoints allows authenticated low-privilege users to traverse...
- Security
CVE-2026-41229 — Froxlor PHP Code Injection via MySQL
A critical PHP code injection vulnerability in Froxlor allows an admin with change_serversettings permission to inject arbitrary PHP code via unescaped...
- Security
CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0
A stack overflow vulnerability in Perl's Storable module (versions before 3.05) stems from a signed/unsigned integer mismatch in retrieve_hook(), enabling...
- News
Anthropic MCP Design Vulnerability Enables RCE, Threatening
Cybersecurity researchers have discovered a critical by-design weakness in the Model Context Protocol architecture that enables arbitrary command...
- Security
CVE-2026-6518: WordPress CMP Plugin Arbitrary File Upload
The CMP Coming Soon & Maintenance Plugin for WordPress contains a critical arbitrary file upload flaw that allows subscriber-level authenticated users to...
- Security
CVE-2026-6443: WordPress Accordion Plugin Backdoor in Version 1.4.6
The Accordion and Accordion Slider WordPress plugin version 1.4.6 was sold to a malicious threat actor who embedded a persistent backdoor, granting...
- Security
CVE-2026-4149: Sonos Era 300 Unauthenticated RCE via SMB
A CVSS 10 critical vulnerability in the Sonos Era 300 smart speaker allows unauthenticated remote attackers to execute arbitrary code by exploiting an...
- Security
CVE-2026-6057: FalkorDB Browser Unauthenticated Path
FalkorDB Browser 1.9.3 contains a critical unauthenticated path traversal vulnerability in its file upload API that allows remote attackers to write...
- Security
CVE-2026-1830: WordPress Quick Playground Plugin RCE via Unauthenticated File Upload
A critical CVSS 9.8 vulnerability in the Quick Playground WordPress plugin (versions up to 1.3.1) allows unauthenticated attackers to upload arbitrary...
- Security
CVE-2026-25776: Movable Type Critical Code Injection (CVSS
Six Apart's Movable Type CMS contains a critical code injection vulnerability allowing unauthenticated attackers to execute arbitrary Perl scripts on...
- Security
CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote
A critical sandbox escape vulnerability in PraisonAI's multi-agent framework allows attackers to bypass the Python code execution sandbox, defeating the...
- Security
CVE-2026-39890: PraisonAI YAML Injection Achieves Remote
A critical code injection vulnerability in PraisonAI's AgentService allows attackers to craft malicious YAML files using dangerous js-yaml tags such as...
- Security
CVE-2021-4473: Tianxin Behavior Management System
A critical unauthenticated command injection vulnerability in the Tianxin Internet Behavior Management System's Reporter component allows attackers to...
- Security
CVE-2026-22679: Weaver E-cology 10.0 Unauthenticated Remote
A critical unauthenticated RCE vulnerability in Weaver (Fanwei) E-cology 10.0 allows attackers to execute arbitrary commands by abusing an exposed Dubbo...
- Security
CVE-2026-5731: Firefox and Thunderbird Critical Memory
Mozilla has patched critical memory safety bugs in Firefox, Firefox ESR, and Thunderbird that showed evidence of memory corruption. Exploiting these flaws...
- Security
CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload
Snews CMS 1.7 contains a critical unrestricted file upload vulnerability allowing unauthenticated attackers to upload PHP webshells to the snews_files...
- News
Cisco Patches Critical and High-Severity Vulnerabilities
Cisco has released security advisories addressing a batch of critical and high-severity vulnerabilities across multiple products, covering flaws that...
- Security
CVE-2026-1540: Spam Protect CF7 WordPress Plugin PHP Log RCE
The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows an editor-level attacker to achieve Remote Code Execution by logging a crafted...
- Security
CVE-2026-3502: TrueConf Client Update Integrity Bypass
TrueConf Client fails to verify the integrity of downloaded update payloads, allowing an attacker who can influence the update delivery path to substitute...
- Security
CVE-2026-5272: Chrome GPU Heap Buffer Overflow Enables
A high-severity heap buffer overflow in Chrome's GPU component allows remote attackers to execute arbitrary code via a crafted HTML page. Affects all...
- Security
CVE-2025-15379: MLflow Command Injection in Model Serving
A maximum-severity command injection vulnerability in MLflow's model serving container initialization allows attackers to execute arbitrary OS commands...
- News
CISA: New Langflow Flaw Actively Exploited to Hijack AI
CISA has added CVE-2026-33017, a critical unauthenticated remote code execution vulnerability in the Langflow AI framework, to its Known Exploited...
- Security
CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer
JAD 1.5.8e-1kali1 and prior contains a critical stack-based buffer overflow vulnerability allowing attackers to execute arbitrary code by supplying input...
- Security
CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer
TiEmu 2.08 and prior contains a critical stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by passing oversized...
- News
Critical Langflow RCE Flaw Exploited Within 20 Hours of Disclosure
CVE-2026-33017, a CVSS 9.3 unauthenticated remote code execution vulnerability in the Langflow AI platform, was weaponized by threat actors within 20...
- Security
CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat
ZKTeco ZKBioSecurity 3.0 ships a bundled Apache Tomcat server with hardcoded credentials stored in tomcat-users.xml, granting unauthenticated attackers...
- News
Veeam Patches Five Critical RCE Vulnerabilities Exposing
Veeam Software has released a critical security update for Backup & Replication, patching five remote code execution vulnerabilities with CVSS scores...
- Security
Veeam Backup & Replication Auth RCE — CVE-2026-21666
A critical remote code execution vulnerability in Veeam Backup & Replication allows any authenticated domain user to execute arbitrary code on the Backup...
- Security
Veeam Backup & Replication 2nd Auth RCE — CVE-2026-21667
A second critical remote code execution vulnerability in Veeam Backup & Replication lets any authenticated domain user execute code on the Backup Server,...
- Security
Critical RCE in Veeam Backup & Replication — Third Domain
A third concurrent critical RCE vulnerability in Veeam Backup & Replication enables domain-authenticated attackers to execute code on the Backup Server,...
- Security
Critical RCE in Veeam Backup & Replication HA Deployments
A critical RCE vulnerability in Veeam Backup & Replication high-availability deployments allows users with the Backup Administrator role to execute...
- Security
Critical RCE in Veeam Backup & Replication — Backup Viewer
A critical CVSS 9.9 vulnerability in Veeam Backup & Replication allows users with the lowest-privileged Backup Viewer role to execute arbitrary code as...