Tag: rce
-
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The First seen on…
-
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions.”CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions,” Citrix said.The vulnerability First seen on thehackernews.com Jump…
-
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/
-
Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian missile and drone strikes. GreyNoise documented a nine-day increase in exploitation activity from September 23 to October 1, 2026, following preliminary reconnaissance conducted on September 21. However, researchers could not establish a direct connection between…
-
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python pickle deserialization. This flaw is tracked as CVE-2026-105192 and has a CVSS score of 9.8. JFrog published an advisory and a public proof-of-concept exploit on October 7, 2026, stating that no fixed release was available…
-
Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute arbitrary code with root privileges. Successful exploitation could crash processes, trigger device reloads, and cause denial of service, disrupting network availability. Published on October 7, 2026, advisory cisco-sa-ngoam-rce-LWKQ4BU identifies three vulnerabilities: CVE-2026-76485, CVE-2026-76486,…
-
WordPress RCE Risk: How Malicious HEIC Uploads Can Execute Server Code
Researchers demonstrated a WordPress attack using malicious HEIC uploads to trigger remote code execution on servers with vulnerable image-processing software. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-wordpress-heic-rce-attack/
-
IBM Patches Multiple Langflow OSS Flaws Including Two Critical RCE Vulnerabilities
IBM has disclosed 25 vulnerabilities in Langflow OSS, affecting versions 1.0.0 through 1.12.2. Two of these are critical flaws that allow unauthenticated remote code execution. The security bulletin recommends upgrading to version 1.12.3, and it does not list any workarounds. Langflow provides a visual environment for building AI agents and workflows, featuring customization with Python…
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
ADC und Gateway betroffen – Angreifer nutzen zwei RCE-Zero-Days in Citrix NetScaler aus
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-netscaler-zero-day-rce-schwachstellen-a-0d0ecda04d5fecaaa644a9a911611486/
-
Rejetto HFS servers now actively scanned for critical RCE flaw
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/
-
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 16-year-old researcher breaks into Microsoft analytics service with access to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/
-
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service/
-
SWIFT Banking & Government Middleware Enables RCE
Tags: banking, exploit, government, Hardware, mfa, rce, remote-code-execution, update, vulnerabilityPatch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce
-
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A model check can run code. A cache can mix up requests. A public secret can stay useful for years.That is the lesson…
-
Multiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation
TeamViewer has issued security bulletin TV-2026-1010 to address five high-severity vulnerabilities found in the TeamViewer Full Client, Host, and related services. These vulnerabilities affect deployments on Windows, Linux, and macOS, and include issues such as remote code execution, session permission bypass, arbitrary privileged file writes, and local privilege escalation. Multiple TeamViewer Vulnerabilities CVE-2026-19743 Path […]…
-
WatchGuard fixes critical Fireware OS flaw allowing remote code execution
WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with…
-
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/
-
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says
AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/
-
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says
AI-discovered vulnerabilities are more likely to enable RCE, as disclosures and exploitation rise First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-found-vulnerabilities-rce/
-
Attackers Use PaperCut RCE Chain to Steal Tokens and Access Domain Controller
Tags: access, authentication, cve, cyber, exploit, rce, remote-code-execution, service, threat, vulnerability, zero-dayThreat actors exploited a chained pair of PaperCut MF zero-day vulnerabilities to compromise an education-sector environment, steal a domain-privileged service account token, and reach a domain controller before attempting to extract the Active Directory database. The campaign abused CVE-2026-81578, an authentication-bypass vulnerability in PaperCut MF and NG’s web management interface, together with CVE-2026-82078, a critical…
-
OAuth-Konfiguration entscheidet – Aktiv ausgenutzte F5-Sicherheitslücke ermöglicht RCE ohne Login
First seen on security-insider.de Jump to article: www.security-insider.de/f5-big-ip-apm-rce-oauth-authorization-server-a-a3f8afca359d72c927e3497180b7888a/
-
Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
Citrix has released fixes for two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-88771 and CVE-2026-88772. On September 27, the company confirmed that attackers had already exploited both in the wild. The same update addresses six other vulnerabilities. One of the two exploited bugs affects every deployment running a…
-
Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
Citrix has released fixes for two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-88771 and CVE-2026-88772. On September 27, the company confirmed that attackers had already exploited both in the wild. The same update addresses six other vulnerabilities. One of the two exploited bugs affects every deployment running a…
-
Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack
Citrix has released fixes for two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-88771 and CVE-2026-88772. On September 27, the company confirmed that attackers had already exploited both in the wild. The same update addresses six other vulnerabilities. One of the two exploited bugs affects every deployment running a…
-
Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)
Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/28/citrix-netscaler-rce-zero-days-exploited-for-weeks-cve-2026-88771-cve-2026-88772/
-
Citrix Patches Critical Zero Days Under Active Exploitation
Citrix has confirmed exploitation of two critical zero-day RCE bugs First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/