All news

remote code execution

(9 articles)

May 15, 2026

CVE-2026-42897: Exchange Server Exploited via Email

CVE-2026-42897 lets attackers exploit on-prem Microsoft Exchange through crafted emails. Learn the technical details and how to protect your mail server.

MetInfo CMS CVE-2026-29014 Remote Code Execution

May 5, 2026

MetInfo CMS CVE-2026-29014 Remote Code Execution

MetInfo CMS CVE-2026-29014 is being actively exploited for RCE attacks. Learn how it works, what's at risk, and how to protect your applications now.

GitHub CVE-2026-3854 RCE Flaw: Exploited via Git Push

April 28, 2026

GitHub CVE-2026-3854 RCE Flaw: Exploited via Git Push

Researchers found CVE-2026-3854, a critical GitHub RCE vulnerability triggerable with a single git push. Here's what developers need to know now.

Breeze Cache WordPress Plugin File Upload Exploit

April 23, 2026

Breeze Cache WordPress Plugin File Upload Exploit

CVE-2026-3844 lets unauthenticated attackers upload arbitrary files to WordPress sites running Breeze Cache. 170+ exploits logged. Patch now.

Cohere AI Terrarium Sandbox RCE and Container Escape

April 22, 2026

Cohere AI Terrarium Sandbox RCE and Container Escape

A critical flaw in Cohere's AI Terrarium sandbox allows root code execution and full container escape. Here's what developers need to know now.

Anthropic MCP Flaw Enables RCE and AI Supply Chain Risk

April 20, 2026

Anthropic MCP Flaw Enables RCE and AI Supply Chain Risk

A design vulnerability in Anthropic's MCP protocol enables remote code execution, putting AI supply chains at serious risk. Here's what developers need to know.

Marimo RCE CVE-2026-39987 Exploited in 10 Hours

April 10, 2026

Marimo RCE CVE-2026-39987 Exploited in 10 Hours

The Marimo RCE flaw CVE-2026-39987 was exploited within 10 hours of disclosure. Learn how it works, what's at risk, and how to protect your stack now.

Ninja Forms File Upload Flaw: CVE-2026-0740

April 7, 2026

Ninja Forms File Upload Flaw: CVE-2026-0740

CVE-2026-0740 in Ninja Forms File Upload allows unauthenticated RCE. Over 3,600 attacks blocked in 24 hours. Update to 3.3.27 now.

Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

March 20, 2026

Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

CVE-2026-33017 in Langflow is being actively exploited within 20 hours of disclosure. Here is what happened and how developers can protect their deployments.