Tag: rce flaw
6 articles
PHP Foundation Flags Third RCE Flaw in PHP2Shell Chaos
The PHP Foundation has identified a third remotely executable code (RCE) flaw related to PHP2Shell, but is downplaying its impact, saying it requires a highly unlikely combination of configuration and code to be triggered. The issue, tracked as CVE-2026-115560, will be patched in the next regular PHP release rather than as an emergency hotfix.
OpenCode Patched RCE Flaw Silently, Researchers Warn
A critical remote code execution flaw in OpenCode went unnoticed, leaving developers and security teams vulnerable to potential breaches, and experts are now sounding the alarm. The high-severity vulnerability, rated 9.8, could allow attackers to execute arbitrary code on a developer's machine.
Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules
A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.
N-able Rushes Fourth Hotfix for Unauthenticated RCE Flaw in N-central
N-able has urgently released a fourth hotfix in just five weeks to tackle a critical, unauthenticated remote code execution flaw in its N-central software, affecting all on-premises builds prior to version 2026.3.1.14. All users of these outdated versions must apply the latest fix to safeguard against this maximum-severity vulnerability.
N-able Rushes Patch for Max-Severity RCE Flaw Under Attack
N-able has urgently released a hotfix to tackle a critical remote code execution flaw in its N-central platform, warning customers to patch immediately to protect their environment from potential attacks. With nearly 1,500 N-central servers exposed online, mainly in the US and Europe, swift action is crucial to prevent exploitation.
Autonomous AI Tool Exposes 2-Year-Old Redis RCE Flaw
A 2-year-old vulnerability in Redis, tracked as CVE-2026-23479, went undetected until a cutting-edge autonomous AI tool uncovered it, revealing a critical remote code execution flaw that had been hiding in plain sight. This shocking discovery highlights the power of AI in uncovering even the most elusive security threats.