rce 110
- WordPress Patches Critical Core Flaw Enabling Remote Code Execution
- Critical Bifrost AI Gateway Flaw Allows Unauthenticated Remote Code Execution
- CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited
- Siemens Siveillance Control File Upload Flaw Grants Root-Level Server Access
- Siemens Desigo CC Client Code Execution Flaw via Malicious Graphics Files
- lwIP MQTT Client Out-of-Bounds Write Enables Full Code Execution
- SharePoint Flaw Misclassified as Spoofing Actually Enables Authenticated RCE
- WordPress Patches 'Click2Shell' Theme Install Vulnerability
- WordPress 'Comment2Shell' Flaw Turns Anonymous Comment XSS Into Admin RCE
- PaperCut Warns of Zero-Day Flaw Exploited in NG, MF Print Management Software
- Next.js Patches Critical AVIF and Windows Path Traversal Flaws Enabling Unauthenticated RCE
- CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler RCE by Saturday
- CISA Adds Six Actively Exploited Flaws to KEV Catalog, Including NetScaler, Linux, and SQL Server Bugs
- Critical Code Execution Vulnerability Patched in TeamCity
- Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms via MCP Bridge
- Critical Unauthenticated RCE in Ruflo AI Agent Harness (CVE-2026-59726, CVSS 10.0)
- vBulletin Fixes Critical Pre-Auth RCE Flaw With Public Exploit
- Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
- Critical TeamCity Flaw Lets Attackers Run OS Commands Without Logging In
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
- Unpatched Fastjson Vulnerability Exploited in Attacks
- Unpatched Fastjson Vulnerability Exploited in Attacks
- Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
- PTC Windchill Vulnerability Exploited in Ransomware Campaign
- Kimi K3 AI Agents Found Redis Zero-Days, Built RCE Exploit
- Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit
- CISA Orders Urgent Patch of Actively Exploited Langflow RCE Flaw
- Critical SharePoint RCE Exploited to Steal Machine Keys
- Critical wp2shell WordPress Flaws Exploited to Install Webshells
- Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
- WordPress wp2shell Vulnerabilities Under Mass Exploitation
- ServiceNow AI Platform Flaw Actively Exploited for Unauthenticated RCE
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
- Critical ServiceNow Code Execution Flaw Now Exploited in Attacks
- Critical ServiceNow AI Platform Flaw Actively Exploited
- WordPress Core "wp2shell" RCE Flaws Get Public Exploits, Patch Now
- Unauthenticated RCE in WordPress Core (wp2shell) Now Has Public PoC
- CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
- CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
- CISA Urges Immediate Patching of Actively Exploited SharePoint Zero-Days
- SonicWall SMA1000 Zero-Days Under Active Exploitation, One Enables Command Execution
- iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
- iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days, Added to CISA KEV
- CISA Adds 4 Actively Exploited Flaws to KEV, Including Adobe ColdFusion and Langflow
- AI Agent Runs Ransomware Attack Start to Finish via Langflow RCE
- CISA Adds Actively Exploited SharePoint RCE (CVE-2026-45659) to KEV Catalog
- Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
- Critical Cursor Flaws Let Prompt Injection Escape Sandbox
- Progress Kemp LoadMaster Pre-Auth RCE Under Active Exploitation
- Langflow RCE Flaw (CVE-2026-33017) Exploited to Deploy Monero Miner
- Critical Pre-Auth RCE in Progress Kemp LoadMaster Lets Attackers Run Root Commands
- Critical Progress Kemp LoadMaster Flaw (CVE-2026-8037) Allows Pre-Auth Root RCE
- Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
- CISA Adds Actively Exploited PTC Windchill RCE Flaw to KEV Catalog
- First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
- Microsoft Fixes AutoGen Studio Flaw That Enabled Code Execution
- Splunk Enterprise RCE Flaw Exploited Days After Disclosure
- F5 Patches Two Critical NGINX Open Source RCE Flaws
- Critical Flaw in AVer PTC Cameras (CVSS 9.8) Allows Arbitrary Code Execution
- Chrome and Firefox Patch Critical Memory Safety Bugs
- Attackers Exploit Three Fortinet FortiSandbox Flaws Including CVSS 9.1
- Vertex AI Python SDK Flaw Allows Cross-Tenant RCE via Bucket Squatting
- LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
- Critical Splunk Enterprise Flaw (CVE-2026-20253, CVSS 9.8) Allows Unauthenticated Remote Code Execution
- Veeam Backup & Replication Critical RCE CVE-2026-44963 (CVSS 9.4)
- Chrome V8 Zero-Day CVE-2026-11645 Actively Exploited — Patch Now
- CVE-2026-3300: Critical Everest Forms Pro Flaw Actively Exploited for WordPress Takeover
- Cisco Catalyst SD-WAN Manager Zero-Day CVE-2026-20245 Actively Exploited, No Patch Available
- Actively Exploited Magento RCE CVE-2026-45247 Added to CISA KEV
- Oracle WebLogic CVE-2024-21182 Under Active Exploitation, Added to CISA KEV
- Critical Stack Overflow in HP VoIP Phones Enables Unauthenticated Remote Code Execution
- Gogs Zero-Day RCE Lets Any Authenticated User Execute Arbitrary Code
- CISA Emergency: Exploited LiteSpeed cPanel Plugin Zero-Day Grants Root Access
- KnowledgeDeliver LMS Zero-Day Exploited to Deploy Godzilla Web Shell and Cobalt Strike
- LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
- Drupal Patches Unauthenticated RCE Flaw CVE-2026-9082
- ExifTool CVE-2026-3102: Malicious Image File Triggers macOS Compromise
- ScadaBR 1.2.0 Hit by Four CVEs Including Unauthenticated RCE (CVSS 9.1)
- Critical SEPPMail Gateway Vulnerabilities Enable RCE and Full Mail Traffic Read
- Critical SEPPMail Secure E-Mail Gateway Flaws Enable RCE and Full Mail Traffic Interception
- NGINX CVE-2026-42945: Heap Buffer Overflow Exploited in the Wild, RCE Risk
- Pwn2Own Berlin 2026 Day 2: 15 Zero-Days in Windows 11, Exchange, and RHEL Earn $385K
- Microsoft Exchange CVE-2026-42897 Zero-Day Exploited via Crafted Email
- 18-Year-Old NGINX Rewrite Module Bug Enables Unauthenticated RCE
- Critical Exim Mail Server Flaw Allows Unauthenticated Remote Code Execution
- May 2026 Patch Tuesday: 138 CVEs Including Critical Zero-Click Outlook Flaw CVE-2026-40361
- Google Project Zero Demonstrates 0-Click Exploit Chain for Pixel 10
- Fortinet Patches Critical RCE Flaws in FortiSandbox and FortiAuthenticator
- JDownloader Website Compromised to Distribute Python RAT via Malicious Installers
- cPanel and WHM Patch Three Vulnerabilities Including RCE and Privilege Escalation
- Dozen Critical Vulnerabilities in vm2 Node.js Library Enable Sandbox Escape and RCE
- PAN-OS Zero-Day CVE-2026-0300 Enables Unauthenticated RCE via Captive Portal
- Palo Alto PAN-OS RCE Zero-Day CVE-2026-0300 Actively Exploited
- MetInfo CMS CVE-2026-29014 Under Active Exploitation — Unauthenticated RCE (CVSS 9.8)
- Weaver E-cology CVE-2026-22679 Actively Exploited — CVSS 9.8 Unauthenticated RCE via Debug API
- Critical Gemini CLI Flaw Enabled Host Code Execution and Supply Chain Attacks
- Google Patches CVSS 10 Gemini CLI RCE Enabling Supply-Chain Code Execution
- GitHub RCE Flaw CVE-2026-3854 Exposed Millions of Private Repositories
- Critical GitHub RCE CVE-2026-3854 Exposed Millions of Repositories
- 15-Year-Old OpenSSH Flaw Allowed Full Root Shell Access via Certificate Principal Parsing Bug
- CVE-2026-1731: Critical Bomgar RMM RCE Actively Exploited to Spread Ransomware
- Google Antigravity AI IDE: Prompt Injection Chained to Sandbox Escape and Code Execution
- Splunk Enterprise Patches RCE Flaw Exploitable by Low-Privileged Users via File Upload
- CVE-2026-33032 (MCPwn): Critical Nginx UI Authentication Bypass Actively Exploited
- Fortinet Patches Critical FortiSandbox Vulnerabilities Enabling Auth Bypass and RCE
- April 2026 Patch Tuesday: SharePoint Zero-Day Among 167 CVEs Fixed
- ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
- Adobe Patches Actively Exploited Acrobat Reader RCE — CVE-2026-34621
- Apache ActiveMQ Classic Carries 13-Year-Old RCE Risk via Unauthenticated Jolokia API
- CVE-2026-1337 — RCE in Widely-Used Python ORM