Tag: code execution
56 articles
Magento Vulnerability Exposes Code Execution Risk
A critical Magento vulnerability, known as BlockStrap, has been discovered that could put your e-commerce site at risk of code execution - and experts warn that hackers could exploit it in no time. With a complex attack path, it's only a matter of time before someone creates a working exploit.
Next.js Patches Code Execution Flaws in Caching, SVG Processing
Critical security flaws in Next.js have been patched in an out-of-band update, fixing two remote-code-execution bugs and one denial-of-service vulnerability that left applications open to attacks. The severe flaws, rated 9.5 on the CVSS scale, affected React Server Components and SVG processing.
Curl Fixes Flaw That Exposes Clients to Code Execution
A subtle bug in curl's HTTP/2 upload sequence could let malicious servers corrupt memory on machines running the curl client and libcurl library, potentially leading to code execution - but thankfully, a fix was swiftly rolled out in curl 8.23.0 on October 14. The vulnerability, tracked as CVE-2026-92392, affects curl releases 8.12.0 through 8.22.0.
AI Agents Accelerate Chrome Exploit to $250,000 Payout in Six Days
In just six days, a researcher used AI agents to create a Chrome exploit chain that raked in a $250,000 payout - a stunning achievement that's a testament to the power of speed and innovation in cybersecurity. This lightning-fast feat was made possible by harnessing the power of AI, which racked up around $40,000 in compute charges.
Researchers Bypass Windows SmartScreen Enclave with Four-Byte Write Bug
Microsoft's Windows SmartScreen enclave, designed to provide an extra layer of security, was surprisingly vulnerable to a clever exploit that allowed researchers to run attacker-controlled code inside it. A tiny four-byte write bug was all it took for security firm Doyensec to bypass the enclave's defenses and execute code within it.
GitLab Fixes Code Execution Flaw with Maximum Severity Rating
GitLab has patched a critical vulnerability that could have let hackers run malicious code on its servers, thanks to a flaw in its CI/CD configuration that wasn't properly validating regular expressions. This maximum-severity bug, tracked as CVE-2026-97229, could be exploited by unauthenticated users, making it a major security risk.
GitLab Patches Code Execution Flaw in CI/CD Compiler
GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.
LibreOffice, OpenOffice Flaws Expose Users to Code Execution Risk
A newly discovered flaw in LibreOffice and OpenOffice could put users at risk of code execution, allowing attackers to run malicious Java code simply by opening a specially crafted spreadsheet. Fortunately, LibreOffice has already patched the vulnerability, tracked as CVE-2026-63277, in updates released on October 5.
CISA Warns of Pre-Auth Flaw in MikroTik RouterOS
A critical vulnerability in MikroTik RouterOS, known as CVE-2026-84411, can be exploited with a single crafted request, allowing attackers to execute code with root privileges or cause a denial-of-service condition, even without authentication. This flaw puts your network at risk, and it's essential to take immediate action to protect yourself.
Next.js Flaw Exposes Servers to Code Execution via ImageResponse
A vulnerability in Next.js's ImageResponse feature, powered by the Satori library, allows attackers to inject malicious code by passing tainted values into image generation, putting servers at risk of code execution. This flaw can be exploited when attacker-controlled values are inserted into SVG content, attributes, or styles during image creation.
WordPress Patches Flaw That Enables Code Execution on Vulnerable Servers
WordPress has patched a critical vulnerability (CVE-2026-87902) that could allow hackers to execute malicious code on susceptible servers, giving attackers an easy way to take control. This flaw, rated 9.2 on the CVSS scale, can be exploited without an account or user interaction.
Researchers Breach OpenAI Codex Sandbox, Execute Host Commands
Researchers have made a shocking discovery, finding not one, but two ways to break free from OpenAI's Codex sandbox, allowing code to run rampant on a developer's machine - even in its most locked-down mode. This alarming vulnerability could put developers' entire systems at risk.
WordPress Patches Click2Shell Flaw That Forces Theme Installs
A simple click on a crafted link by a logged-in administrator could allow an attacker to silently install a malicious theme and execute code on your server, thanks to a high-impact vulnerability in WordPress dubbed Click2Shell. This security flaw exploits a discrepancy in how WordPress and the WordPress.org directory interpret web links.
Docker Flaw Lets Guest Code Read, Modify macOS Host Files
A newly discovered Docker flaw on macOS could allow malicious code in a virtual machine to break free from its sandbox and read or modify sensitive host files, potentially leading to code execution on the host. This vulnerability, tracked as CVE-2026-77179, leverages a weakness in the virtio-fs host server to gain unauthorized access.
cPanel Flaw Enables Code Execution as Root via Mail Privileges
A critical cPanel security flaw, known as CVE-2026-67401, allows hackers with mail-related privileges to create files on a server and execute code as the root user, putting your entire system at risk. This vulnerability affects every supported version of cPanel and WHM, making it crucial to take immediate action.
Broadcom Patches VMware Flaws That Expose Hosts to Code Execution
Broadcom has patched a critical VMware flaw that lets attackers with local admin access on a virtual machine execute code on the host, thanks to an integer-overflow vulnerability in the VMXNET3 virtual network adapter. This bug, tracked as CVE-2026-59346, earned a near-perfect CVSS score of 9.3, highlighting the severity of the threat.
PostgreSQL Patches 12-Year-Old Flaw Enabling Code Execution
A 12-year-old flaw in PostgreSQL, just patched, allowed replication users to execute arbitrary code on the database server, posing a significant security risk. The vulnerability, tracked as CVE-2026-6471, was exploitable by accounts with the REPLICATION attribute and has been fixed in releases 18.6, 17.11, 16.15, 15.19, and 14.24.
AI Coding Agents Exposed to Code Execution via Malicious Git Configs
Researchers have uncovered a shocking vulnerability in seven AI coding agents, where malicious Git configurations can trick the tools into running attacker-supplied code on a developer's machine. This flaw, linked to Git's core.fsmonitor setting, has already led to eight security flaws, with four still unpatched.
Gitea Servers Exposed to Ongoing Code Execution Attacks
Thousands of Gitea servers remain vulnerable to code execution attacks, with 8393 Internet-exposed IPs still susceptible to CVE-2026-60004, a code injection bug that lets attackers execute arbitrary shell commands. This flaw can be easily exploited by anyone with write access to a repository, which is especially concerning since Gitea enables self-registration by default.
Microsoft patches exploited Entra ID flaw amid rising attacks
Microsoft has patched a critical vulnerability in its Entra ID platform, known as CVE-2026-69836, which allowed attackers to execute code remotely with ease, and has already been exploited in recent attacks. This flaw enabled unauthorized threat actors to gain control and wreak havoc, making swift action crucial to prevent further damage.
Apple patches image-processing flaw exploited in spyware campaigns
Apple just patched a major security flaw in its ImageIO system that could let attackers run code on your device - and it's already been used in sneaky spyware campaigns targeting high-profile targets.
Hugging Face Diffusers Flaws Expose AI Supply Chain to Code Execution Risk
Three high-severity vulnerabilities, dubbed "FaceHugger," have been discovered in the popular Hugging Face Diffusers library, which has been downloaded over 8.1 million times, putting the AI supply chain at risk of code execution attacks. These flaws can bypass a key safeguard, highlighting the urgent need for users to take action.
Broadcom Fixes VMware Flaws That Allow Auth Bypass and Code Execution
Broadcom has patched critical VMware vCenter flaws, including a severe authentication-bypass vulnerability that could let hackers gain unauthorized access to your system. This game-changing flaw, rated 9.8 in severity, can be exploited by malicious actors with network access to wreak havoc on your VMware environment.
Exploit for Patched vBulletin Flaw Disclosed
A newly disclosed exploit for a patched vBulletin flaw shows how an unauthenticated request can be used to execute code on an unpatched forum server, putting vulnerable sites at risk. This security threat was made public on July 27, highlighting the importance of keeping software up to date.