#rce
-
Forgejo Patches Critical Remote Code Execution Vulnerability
The Forgejo project has released versions 16.0.4 and 15.0.8, fixing two vulnerabilities, including a critical RCE flaw in the mechanism for creating repositories from templates.
-
SAP Patches Critical OVERPASS Vulnerability Rated CVSS 10.0
SAP has released security updates, fixing a kernel vulnerability that allowed arbitrary commands to be executed on the server without authentication. Four critical flaws were patched in total.
-
CISA Adds Critical N-able N-central RCE Vulnerability to Its Actively Exploited Catalog
The flaw, which carries the maximum CVSS score of 10.0, allows unauthenticated code execution and is already being used in attacks. U.S. federal agencies have been ordered to remediate it by September 11, 2026.
-
N-able rushes out a fix for a critical RCE flaw in N-central
N-able has released an emergency update for its N-central remote monitoring platform, patching a maximum-severity vulnerability that allows arbitrary code execution without authentication.
-
Actively Exploited Sandbox RCE Vulnerability in All Versions of Chromium
An entry has appeared in the NVD for the critical vulnerability CVE-2026-85046, which affects all versions of Chromium and, judging by its description, is already being used in attacks.
-
HPE Patches Critical Remote Code Execution Vulnerability in ArubaOS-CX
Hewlett Packard Enterprise has fixed a critical flaw in the ArubaOS-CX network operating system that allowed an unauthenticated attacker to remotely execute code with elevated privileges. A total of 24 vulnerabilities were patched.
-
Critical Elementor Pro Vulnerability Being Used to Hijack WordPress Sites
The recently patched CVE-2026-32475 vulnerability in the popular Elementor Pro plugin allows attackers to upload a web shell and execute arbitrary commands on the server. Wordfence has already blocked around 200,000 attack attempts.
-
Hackers Attack the Sangoma Switchvox VoIP Platform Through SQL Injection
Attackers are mass-exploiting the CVE-2026-9586 vulnerability in Sangoma Switchvox, which allows unauthenticated code execution and the deployment of a reverse shell.
-
Vulnerability in Popular WordPress Backup Plugin Threatens Takeover of Millions of Sites
An SQL injection in All-in-One WP Migration and Backup lets an unauthenticated attacker execute code and gain full control over a site. Only about a third of users have updated.
-
Five Critical Vulnerabilities in WordPress Plugins and Themes Threaten Site Takeover
Researchers at Wordfence and Patchstack have disclosed five critical flaws in popular WordPress add-ons — ranging from authentication bypass to remote code execution. WPMU DEV Dashboard, Avada, TranslatePress, Pods and GiveWP are all at risk.
-
Unitree G1 EDU Humanoid: Two RCE Chains to Root, One Over Bluetooth
Researcher Olivier Laflamme has disclosed two independent vulnerabilities in the Unitree G1 EDU robot that grant root privileges on its control computer. One of the attacks begins with ordinary BLE proximity.
-
Next.js Patches Two Critical Remote Code Execution Vulnerabilities
Vercel has shipped out-of-band patches for Next.js: one flaw is exploited through a malicious AVIF file, the other through path traversal on Windows servers. Both allow code execution without authentication.
-
Critical Avada Theme Vulnerability for WordPress: Zero-Click RCE
A chain of six vulnerabilities in the popular Avada theme lets an unauthenticated attacker execute arbitrary PHP code on the server. The flaw was found by a Wordfence AI tool in under two hours.
-
Critical RCE Vulnerability in Gitea Already Being Exploited for Cryptojacking
CISA has warned of active attacks against CVE-2026-60004 in Gitea. Rated 9.8, the flaw allows arbitrary command execution, and the first victims have found a miner-like payload on their servers.
-
Attack on Zimbra: Over 270 Servers Breached Through an SNMP Vulnerability
Attackers are actively exploiting the critical vulnerability CVE-2026-73570 in Zimbra Collaboration Suite, which allows remote code execution without authentication. According to Shadowserver, hundreds of servers have been compromised.
-
Critical Entra ID Vulnerability (CVSS 10.0): Remote Code Execution Already Exploited
Microsoft has disclosed a maximum-severity flaw in its Entra ID cloud identity service that attackers have already exploited. The company insists the vulnerability has been fully remediated and that no action is required from customers.
-
A Critical Zimbra Vulnerability Is Already Being Exploited in Attacks
Poland's CERT has warned of active exploitation of the critical vulnerability CVE-2026-73570 in the Zimbra Collaboration Suite mail server, which allows arbitrary code execution without authentication.
-
Critical Elementor Pro Vulnerability Opens the Door to Unauthenticated Code Execution
A flaw in the forms module of the popular WordPress plugin lets an unauthenticated attacker upload a PHP file and run arbitrary code. The patch landed on August 19.
-
CISA: Critical Windows IKE Vulnerability Already Exploited in Attacks
The U.S. agency CISA has warned of active exploitation of a critical RCE vulnerability in the IKE service extensions component, affecting all supported versions of Windows.
-
CISA Adds Actively Exploited Ray Vulnerability to KEV Catalog
The critical CVE-2025-62593 vulnerability in the Ray distributed computing framework allows arbitrary code execution through a developer's browser via a DNS rebinding attack.
- More