Tag: code injection attacks
2 articles
Hackers Exploit Roundcube Flaw in Code Injection Attacks
Over 523,000 Roundcube webmail instances are vulnerable to a high-severity flaw, CVE-2026-48842, that's being exploited by hackers to inject malicious code and steal sensitive data. This pre-authenticated SQL injection vulnerability allows attackers to bypass authentication and wreak havoc on your database.
Invisible Screen Text Exposes Android AI Agents to Code Injection Attacks
Researchers found that a simple payload could launch a code injection attack on four open-source Android agent frameworks, successfully executing commands on the host's system in every trial. This alarming vulnerability allows attackers to exploit AI agents by manipulating text on the screen, turning a harmless string into a malicious command.