#rce
-
From Schema Name to RCE: Dissecting CVE-2026-33696 in n8n
Researcher Simon Köck describes how the innocuous “Custom Fields” option in the GSuiteAdmin node of the n8n automation platform turns into remote code execution through prototype pollution.
-
Zoom Hacked in a Single Day: AI Finds a Zero-Click Flaw in Annotations
A Security has discovered a critical vulnerability in Zoom that lets an attacker take over the device of any call participant without a single click. The real story isn't the bug itself, but the fact that a “nation-state-grade” exploit was put together using publicly available AI models in less than a day.
-
Rapid7 uncovers a SharePoint exploit chain with an AI agent
Rapid7 researchers chained an authentication bypass and a remote code execution vulnerability in Microsoft SharePoint to gain access with no account at all. Much of the work was done by an AI agent — which, the company admits, “cheated.”
-
Three Paperclip Vulnerabilities Allow Command Execution via Malicious Agent Import
Three flaws — including a critical one with a maximum CVSS score of 10.0 — have been found in Paperclip, the open-source platform for managing teams of AI agents. All of them boil down to the same thing: an agent's configuration turns into executable code.
-
TP-Link Patches 15 Vulnerabilities in the ZTP Mechanism of Omada Devices
Forescout researchers showed how a chain of new and previously disclosed vulnerabilities in Omada's automatic provisioning system lets attackers break into corporate networks and execute arbitrary code.
-
Pre-auth RCE in Apple Screen Sharing: root in 60 seconds thanks to a forgotten error code
A critical vulnerability has been found in the screensharingd daemon on macOS up to version 26.5: a bug in the SRP frame-length check lets an unauthenticated attacker gain root privileges with no password and no user interaction.
-
KindaRails2Shell: a Critical RCE Vulnerability in Rails via Active Storage
Ethiack researchers have disclosed CVE-2026-66066 in standard Ruby on Rails applications that use Active Storage with the vips processor. It allows arbitrary file reads and remote code execution.
-
Critical TeamCity Vulnerability: Command Execution Without Authorization
JetBrains is urging users of on-premises TeamCity to update immediately: a critical flaw rated 9.8 lets an unauthenticated attacker execute operating system commands.
-
Exploit Published for Already-Patched Pre-Auth RCE in vBulletin
Researchers have disclosed CVE-2026-61511 — a vulnerability in vBulletin's template engine that allows code execution without authentication. The patch came out nearly a month before the exploit was published, but many forums still haven't updated.
-
n8n Sandbox Escape: Workflow Editor Could Run OS Commands
The n8n automation platform has patched a high-severity vulnerability: an authenticated workflow editor could break out of the expression sandbox and run operating-system commands with the privileges of the n8n process.
-
RCE Vulnerability Found in Fastjson 1.x — Attacks Already Underway, No Patch Available
A critical flaw in Alibaba's JSON library allows unauthenticated code execution in Spring Boot applications. As of July 25, no fixed version of Fastjson 1.x exists.
-
PoC Exploit for GitLab: An Authenticated User Gains Command Execution as git
A researcher has published a working exploit for unpatched self-managed GitLab: all it takes is to commit two crafted Jupyter notebooks and request a diff of them.
-
Kimi K3 AI agents found flaws in Redis and assembled a working RCE exploit
On July 23, Redis shipped seven fixes after the publication of PoCs demonstrating remote code execution against stock builds 6.2.22, 7.4.9, 8.6.4 and 8.8.0. The researchers claim the chains were found by autonomous AI agents.
-
CISA Orders Urgent Patching of Langflow RCE Flaw
The U.S. cyber agency has directed government bodies to urgently remediate an actively exploited vulnerability in Langflow — a visual framework for building AI agents — that grants remote code execution with root privileges.
-
Critical SharePoint Vulnerability CVE-2026-50522 Exploited After PoC Release
The third SharePoint Server vulnerability from Microsoft's July patch batch has come under active exploitation: attackers are stealing servers' machine keys to gain persistence in the system.
-
Critical ServiceNow AI Platform Vulnerability Comes Under Active Attack
Researchers at Defused have observed attacks exploiting CVE-2026-6875 in the ServiceNow platform — just days after the patches were released.
-
7-Zip patches critical vulnerability allowing arbitrary code execution
The 7-Zip developers have released version 26.02, closing a remote code execution vulnerability exploitable through specially crafted archives. Users are advised to update the application as soon as possible.
-
Public Exploits Released for Critical wp2shell RCE Vulnerabilities in WordPress Core
Public exploits have surfaced for the critical wp2shell vulnerabilities in WordPress core, which allow arbitrary code execution on the server. Site administrators are urged to install the updates immediately.
-
Unauthenticated RCE Vulnerability Found in the Motorola MR2600 Router
A security researcher has reported a critical vulnerability in the Motorola MR2600 router that allows arbitrary code to be executed on the device without authentication. The details have been published in an open report.
-
ProjectDiscovery researchers turned an SQL injection into remote code execution on Apple's infrastructure
The ProjectDiscovery team has published a report on an SQL injection vulnerability they discovered, which allowed them to achieve remote code execution in one of Apple's services. The details of the attack are described on the company's blog.