Tag: remote code execution
416 articles
Arista Disrupts Actively Exploited Zero-Day in VeloCloud Orchestrator
Arista Networks has sounded the alarm on a critical zero-day vulnerability, CVE-2026-93952, that's being actively exploited in the wild, allowing attackers to access sensitive internal functionality in VeloCloud Orchestrator. This severe flaw can be easily exploited with low complexity, making it a high-risk threat.
F5 Discloses Zero-Day Flaw in BIG-IP APM Exploited for Unauthenticated RCE
A critical flaw in F5's BIG-IP Access Policy Manager is being exploited by attackers, allowing them to run code on the system without logging in. This severe vulnerability, tracked as CVE-2026-94127, has a near-perfect score of 9.8/10 on CVSS v3.1 and enables unauthenticated remote code execution.
China-Aligned Group Exploits Chrome, Microsoft Zero-Days
A China-aligned threat group has been exploiting a chain of three zero-day vulnerabilities in Google Chrome and Microsoft Windows, highlighting a coordinated effort within the Chinese computer network exploitation community. This alarming discovery reveals the group's ability to rapidly weaponize and customize exploits across multiple campaigns.
Arista Warns of Active Exploits in VeloCloud Orchestrator Flaw
Arista warns of a critical vulnerability in its VeloCloud Orchestrator, tracked as CVE-2026-93952, which is being actively exploited by attackers and could allow them to gain unauthorized access to sensitive data and devices. This severe flaw has been assigned a CVSS 3.1 score of 10.0, indicating a high risk of compromise.
SharePoint Flaw Enables Authenticated Remote Code Execution
A newly discovered flaw in SharePoint, initially downplayed by Microsoft as a minor spoofing issue, has been revealed to be a critical vulnerability that allows authenticated attackers to execute remote code, putting systems at risk. This vulnerability, tracked as CVE-2026-65660, has a much higher severity score of 8, underscoring the urgent need for patching.
D-Link Routers Expose Zero-Day Flaw to Remote Attacks
D-Link routers are under threat from a zero-day flaw that lets hackers launch remote attacks without needing login credentials, simply by sending specially crafted DHCP packets. This vulnerability can cause the device's DHCP daemon to crash or allow attackers to execute malicious code, putting your data at risk.
WordPress Flaw Exposes Sites to Code Execution via Comment
A cleverly crafted comment can turn into a powerful attack tool, allowing hackers to execute code on vulnerable WordPress sites - and it's all because moderation isn't a foolproof security measure. This surprising vulnerability, dubbed Comment2Shell, highlights a gap in WordPress's defenses that can be exploited with just a simple comment.
WordPress Flaw Exposes Servers to Remote Code Execution
A newly discovered WordPress vulnerability, dubbed Click2Shell, can be exploited to execute remote code on servers, and security researchers have already published technical details and a proof-of-concept. This critical flaw was patched in WordPress 7.1.1, but earlier versions remain vulnerable.
Cisco Zero-Day Exploited in Active Attacks
Cisco is warning of a critical zero-day flaw in its Identity Services Engine (ISE) that's being actively exploited, allowing attackers to bypass authentication and gain unauthorized access with just a crafted request. This severe vulnerability, tracked as CVE-2026-76460, has been assigned a maximum CVSS score of 10.0.
SolarWinds Fixes Hard-Coded Key Flaw in Access Rights Manager
SolarWinds has patched a high-severity vulnerability in its Access Rights Manager software, known as CVE-2026-28326, which could have allowed hackers to remotely execute code without authentication due to a hard-coded static key. The flaw, scoring 8.8 out of 10 in severity, has been fixed in ARM 2026.2.1, and users are urged to update to prevent potential attacks.
AI Model Exploits Chained Flaws to Breach OpenAI Staff Accounts
In just 72 hours, researchers exploited a chain of flaws - starting with a bug in image-processing software - to breach several OpenAI staff accounts and gain access to an internal code repository. The surprising attack began with a vulnerability in a library used to parse HEIC and HEIF images, highlighting the potential for unexpected entry points.
Orkes Conductor Flaw Exploited in Wild, Fortinet Warns
A critical flaw in Orkes Conductor is being exploited in the wild, allowing attackers to execute malicious code remotely without authentication. Fortinet has reported blocking 1,290 attack attempts in just 24 hours, a 132% surge in malicious activity.
Researchers Expose OpenAI Vulnerability Using Rival AI Model
Meet the Hacktron researchers who uncovered a major OpenAI vulnerability, exposing a potential account takeover risk for ChatGPT and Codex users who logged into the company's help forum. They cleverly used a rival AI model to develop an exploit, chaining flaws to gain access to multiple OpenAI accounts.
AI-Assisted Research Exposes Widespread Flaw in Software Decoders
Imagine uploading a seemingly harmless image, only to have it trigger a sneaky data heist - researchers have uncovered a widespread flaw in software decoders that lets attackers swipe sensitive information like user data and passwords. This cleverly crafted exploit, dubbed HEIF Heist, can even occur without immediate remote code execution.
Check Point Flaw Lets Unauthenticated Users Execute Code as Root
A critical flaw in Check Point's Security Management and Log Servers, rated 9.8 out of 10, allows unauthenticated users to execute code as root via a simple login request with a very long username. Fortunately, there's no evidence that this vulnerability has been exploited in the wild - yet.
AI Coding Agents Expose Zero-Click Flaw
A newly discovered vulnerability, dubbed Plugin4Shell, allows attackers to execute remote code with just a single click - or none at all - giving them carte blanche access to sensitive data and assets. This zero-click flaw in AI coding agents highlights the urgent need for updated security measures to prevent devastating supply-chain attacks.
Unbound DNSSEC Validator Flaw Enables Remote Code Execution
A critical flaw in the Unbound DNSSEC Validator, known as CVE-2026-81642, allows attackers to trigger a heap overflow, potentially enabling remote code execution on vulnerable systems. This vulnerability affects all Unbound DNS resolver releases before 1.26.1, putting countless systems at risk.
Exploits Target Issabel Framework Flaw for Unauthenticated OS Command Execution
A critical flaw in the Issabel Framework, rated 9.8 out of 10 for severity, allows hackers to execute malicious commands on vulnerable systems without needing login credentials. This vulnerability can be exploited using a hard-coded security key, enabling attackers to forge tokens and gain control.
Cisco Discloses Actively Exploited Zero-Day in Email Gateways
A critical zero-day vulnerability, CVE-2026-76461, is under active exploitation, allowing hackers to remotely execute commands as root on Cisco Secure Email Gateway appliances with just a simple email. This gaping security hole gives attackers total control of the gateway, putting your email security at risk.
Skilled Human Attackers Exploit Marimo Flaw to Reach SSH Bastion in 8 Seconds
In a stunning display of speed, a skilled human attacker exploited a flaw in Marimo to breach a secure SSH bastion in just 8 seconds - a pace typically associated with AI-assisted attacks. This remarkable feat was made possible by a pre-authenticated remote code execution bug, CVE-2026-39987, with a near-perfect CVSS score of 9.3.
Cisco Discloses Zero-Day Exploited in Secure Email Gateway Attacks
Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.
Cisco Email Gateway Flaw Exploited, Enables Root Command Execution
A critical Cisco email gateway flaw, CVE-2026-76461, with a near-perfect CVSS score of 9.8, is being actively exploited in the wild, allowing attackers to send a single crafted email and gain root command execution on vulnerable devices. This severe vulnerability stems from insufficient validation in AsyncOS email parsing, making it a pressing concern for Cisco Secure Email Gateway users.
Human Exploits Marimo Flaw to Breach SSH Bastion Host in 8 Seconds
In just 8 seconds, a human attacker exploited a vulnerability in Marimo notebooks to breach an SSH bastion host, showcasing the alarming speed and ease of lateral movement within compromised systems. This lightning-fast breach was achieved without the aid of AI tools, highlighting the severity of the CVE-2026-39987 flaw.
Hackers exploit Tencent app flaw to deploy GrayRabbit malware
Hackers are actively exploiting a critical flaw in Tencent's Sogou Input Method for Windows, using a clever one-click trick to deploy the GrayRabbit backdoor; researchers warn that this vulnerability, tracked as CVE-2026-51990, is being used to deliver malware to unsuspecting victims.