Tag: remote code execution
416 articles
BeyondTrust Zero-Day Exploited in Targeted Attacks Since August
A critical zero-day vulnerability, CVE-2026-102764, has been exploited in targeted attacks since late August, putting BeyondTrust Remote Support users at risk of file operations and even full root control by unprivileged remote attackers. The flaw affects Remote Support builds 26.2.3 and earlier, but thankfully, patches are available.
Next.js Patches Code Execution Flaws in Caching, SVG Processing
Critical security flaws in Next.js have been patched in an out-of-band update, fixing two remote-code-execution bugs and one denial-of-service vulnerability that left applications open to attacks. The severe flaws, rated 9.5 on the CVSS scale, affected React Server Components and SVG processing.
NGINX Disrupts Multiple Flaws, Including Possible RCE and TLS Session Forgery
NGINX just dropped a critical update to squash five vulnerabilities, including a long-standing flaw dating back to May 2005 that could lead to code execution or crashes in certain configurations. The patches fix memory bugs, a TLS session-ticket weakness, and an HTTP/3 parser issue that could put your system at risk.
Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules
A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.
AhsayCBS Flaws Get Fresh Fixes After Exploitation
Don't wait until it's too late - apply the AhsayCBS hotfix immediately to shield your environment and customer data from severe vulnerabilities that can be exploited for unauthenticated remote code execution. Reboot your server after applying the fix to ensure you're fully protected.
Langflow Exploit Attempts Surge Amid Authenticated RCE Flaw
Authenticated hackers are on the hunt, with 1,423 attempts recorded to exploit a critical remote-code-execution flaw in Langflow, a vulnerability that scores a near-perfect 9.9 on the CVSS scale. This alarming spike highlights how quickly attackers pounce on high-risk weaknesses.
Palo Alto Networks Fixes Authenticated RCE Flaw Under Active Exploitation
Palo Alto Networks has patched a critical vulnerability, CVE-2026-0322, that allowed hackers to execute malicious code with root privileges on its firewalls - and it was under active attack. This authenticated remote code execution flaw, scoring 8.6 in severity, could be exploited by anyone with network access to the PAN-OS management interface.
Palo Alto Networks Discloses Exploited PAN-OS Zero-Day Flaw
Palo Alto Networks has patched a high-severity zero-day flaw, CVE-2026-0322, that lets hackers execute code as root on vulnerable firewalls and appliances. The company says only limited exploitation has been observed so far, but urges users to update their PAN-OS management interface ASAP.
Cisco Email Flaw Exploited in Zero-Day Attacks
Cisco is urging customers to upgrade to a fixed software release after a critical vulnerability in its Secure Email Gateway was exploited in active zero-day attacks, allowing hackers to gain root access with just a malicious email. The flaw, scored 9.8 out of 10 on the CVSS scale, enables remote attackers to write files and execute commands with root privileges on the appliance operating system.
Cisco Discloses Active Attacks on Secure Email Gateway Flaw
Cisco is warning users of its Secure Email Gateway of an actively exploited flaw that could allow hackers to run commands as root, giving them total control of the system. This critical vulnerability, scored 9.8, is being targeted by attackers who are sending crafted email attachments to take advantage of the weakness.
Ivanti Discloses Zero-Day Exploits in Connect Secure
Ivanti has sounded the alarm on zero-day exploits targeting its Connect Secure software, warning that a limited number of customers have already been affected. The company has released urgent updates to patch the vulnerabilities and is urging customers to act fast to avoid falling prey to these attacks.
Ivanti Zero-Day Exploited Before Patch Release
Ivanti's internal discovery of a zero-day vulnerability in June didn't stop attackers from exploiting it in the wild by October 1, highlighting a disturbing gap in patch protection. Researchers uncovered a chain of three zero-day flaws being used to breach Ivanti Connect Secure authentication and execute remote code.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
Ghostscript Flaw Exposes Servers to Remote Code Execution via PDFs
A critical flaw in Ghostscript, a popular PostScript and PDF interpreter, can be exploited by hackers to remotely execute code on vulnerable servers - simply by processing a specially crafted PDF file. This severe vulnerability, known as a heap buffer overflow, can be triggered by a malicious PDF containing a JPEG 2000 image with specific characteristics.
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.
Ivanti Discloses Zero-Day Exploited in Targeted Attacks
A high-severity zero-day vulnerability in Ivanti Connect Secure appliances is being exploited in targeted attacks, allowing remote attackers to execute arbitrary commands without user interaction. This authentication bypass flaw, tracked as CVE-2026-104935, affects several ICS versions and requires immediate patching and mitigation.
Attackers Exploit Bricksforge WordPress Flaw for Unauthenticated RCE
A critical flaw in the Bricksforge WordPress plugin, rated CVSS 10.0, allows hackers to upload and execute malicious code on vulnerable sites without needing login credentials. This gaping security hole is being actively exploited, putting sites at risk of remote code execution.
SonicWall SMA1000 flaw exploited in targeted attacks
A critical vulnerability, CVE-2026-102255, in SonicWall SMA1000 appliances is being exploited in targeted attacks, putting sensitive internal functionality at risk. This maximum-severity flaw allows remote attackers to manipulate the appliance and perform unauthorized operations.
Citrix Patches Flaw That Enables RCE in SAML Deployments
Citrix has patched a critical vulnerability, CVE-2026-107406, with a near-perfect score of 9.5, that could allow devastating remote code execution or denial-of-service attacks in SAML deployments. The flaw can be triggered under specific configuration conditions when NetScaler instances are set up as a SAML identity provider or service provider.
Citrix Warns of Immediate Patching Need for NetScaler RCE Flaw
Citrix is sounding the alarm on a critical vulnerability, CVE-2026-107406, that can lead to remote code execution or a denial-of-service state in NetScaler devices - and it's urging admins to patch immediately.
Cisco Discloses Critical Flaws in Nexus Switches
Cisco has uncovered five critical vulnerabilities in its Nexus switches that could let hackers run malicious code with root access or bring down entire networks, causing major disruptions. This security threat affects Nexus 3000 and 9000 Series switches, putting your network at risk of remote code execution and denial-of-service attacks.
LMCache Flaw Exposes Servers to Remote Code Execution
A newly discovered flaw, CVE-2026-105192, allows hackers to send a single network message that can execute malicious code on vulnerable LMCache multiprocess cache servers, with no patch available yet. This vulnerability can be exploited when the multiprocess server is configured to listen on a routable address, making it a serious threat to servers that aren't properly secured.
LibreOffice, OpenOffice Flaws Expose Users to Code Execution Risk
A newly discovered flaw in LibreOffice and OpenOffice could put users at risk of code execution, allowing attackers to run malicious Java code simply by opening a specially crafted spreadsheet. Fortunately, LibreOffice has already patched the vulnerability, tracked as CVE-2026-63277, in updates released on October 5.
Hackers Actively Scan Rejetto HFS Servers for Critical RCE Flaw
Hackers are on the hunt for Rejetto HFS servers with a critical flaw that lets them forge sessions, take over accounts, and execute remote code - and it's crucial to update to version 3.2.1 ASAP to avoid falling victim. This vulnerability, known as CVE-2026-61500, was patched in July, but attackers are actively scanning for affected servers.