remote code execution

Stories

Security

VMware vCenter flaw exploited by ransomware groups

The U.S. Cybersecurity and Infrastructure Security Agency reports that ransomware gangs are now targeting a critical remote-code-execution vulnerability in VMware vCenter, patched in July 2026.

20 Sep 2026 · 2 min

Security

MikroTik RouterOS flaws exploited in active attacks

Attackers are exploiting two recently disclosed RouterOS flaws to compromise MikroTik routers with internet-exposed SSH services, security researchers report.

7 Sep 2026 · 2 min

Security

HPE fixes critical ArubaOS-CX RCE vulnerability

Hewlett Packard Enterprise has released a security update for ArubaOS-CX to address a critical remote code execution vulnerability, mitigating potential network compromise risks.

3 Sep 2026 · 2 min

Security

Sangoma Switchvox flaw exploited for reverse shells

Hackers are exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in Sangoma Switchvox, to deploy reverse shells and gain remote code execution on affected systems.

2 Sep 2026 · 1 min

Security

SharePoint RCE flaw exploited in ransomware attacks

The U.S. Cybersecurity and Infrastructure Security Agency has confirmed that ransomware groups are exploiting a remote code execution vulnerability in Microsoft SharePoint, which has been under active attack since early July.

11 Aug 2026 · 2 min

Security

TP-Link fixes 15 Omada ZTP vulnerabilities

TP-Link patched 15 vulnerabilities in its Omada zero-touch provisioning system, allowing attackers to combine them with earlier flaws to gain remote code execution on enterprise networks.

4 Aug 2026 · 2 min

Security

JetBrains patches critical TeamCity RCE vulnerability

JetBrains has released a security update for TeamCity On-Premises to address a critical authentication bypass vulnerability that could enable remote code execution. The flaw affects all versions prior to the patched release.

30 Jul 2026 · 2 min

Security

FastJson RCE zero-day exploited in US firms

Hackers are exploiting a zero-day vulnerability in the FastJson Java library to execute remote code on US-based systems without authentication or elevated privileges.

28 Jul 2026 · 2 min

Security

CISA flags critical Ubiquiti, Lantronix flaws under active attack

CISA has added four critical vulnerabilities in Ubiquiti UniFi OS and Lantronix EDS5000 serial-to-Ethernet servers to its Known Exploited Vulnerabilities catalog, citing active exploitation. Federal agencies must apply patches or mitigations by 27 June 2026.

24 Jun 2026 · 4 min

Security

CISA orders federal agencies to patch exploited Splunk flaw by 21 June

CISA has mandated federal agencies to patch a critical Splunk Enterprise vulnerability (CVE-2026-20253) by 21 June 2026, following evidence of in-the-wild attacks. The flaw allows unauthenticated file operations via a PostgreSQL sidecar endpoint.

19 Jun 2026 · 3 min

Security

CISA mandates patch for exploited Joomla plugin flaw

CISA has ordered federal agencies to patch a maximum-severity vulnerability in the Widget Factory Joomla Content Editor (JCE) plugin, tracked as CVE-2026-48907, which is being actively exploited. The flaw allows unauthenticated attackers to execute code on Joomla sites using the plugin.

17 Jun 2026 · 4 min

Security

MariaDB Patches CVSS 10.0 RCE Flaw in Galera Cluster Replication Component

MariaDB has issued fixes for CVE-2026-49261, a CVSS 10.0 remote code execution vulnerability in the wsrep_notify_cmd feature used by Galera Cluster. Two additional CVSS 8.0 parameter-injection flaws were patched in the same May 27 release. Standalone MariaDB deployments are unaffected.

15 Jun 2026 · 3 min

Security

ShinyHunters Exploits Oracle PeopleSoft Zero-Day, Breaches 100+ Organizations

Mandiant and Google Threat Intelligence Group have attributed an active compromise campaign to ShinyHunters (UNC6240), exploiting CVE-2026-35273 in Oracle PeopleSoft before Oracle issued its advisory on June 10, 2026. Over 100 organizations were exposed, 68% of them academic institutions.

13 Jun 2026 · 4 min