remote code execution

CISA added a high-severity remote code execution vulnerability (CVE-2026-45659) in Microsoft SharePoint Server to its Known Exploited Vulnerabilities catalog due to active exploitation. The flaw, rated with a CVSS score of 8.8, stems from deserialization of untrusted data.

Microsoft has warned users about 'Crypto Clipper' malware distributed through USB drives. The malware combines data theft with remote code execution, transforming a financially motivated stealer into a lightweight backdoor.

Cybersecurity researchers disclosed three patched security flaws in LangGraph, an open-source framework by LangChain for building AI agents, including a critical vulnerability chain that could lead to remote code execution.

Gogs has patched a critical zero-day security flaw that could allow attackers to execute remote code and access repositories, including private ones, on Internet-facing instances.

A critical bug in Ubiquiti UniFi OS allows hackers to gain root access without authentication by chaining three fixed vulnerabilities. Attackers can execute remote code with elevated privileges through this exploit.

Threat actors are exploiting a critical remote code execution vulnerability (CVE-2026-3300) in Everest Forms Pro, a WordPress plugin with 4,000 active installations, leading to site compromises. The vulnerability affects all versions up to 1.9.12.

A critical remote code execution (RCE) vulnerability has been disclosed in Gogs, an open-source self-hosted Git service, allowing authenticated users to execute arbitrary code. The flaw is rated 9.4 on the CVSS scoring system and currently lacks a CVE identifier.

A new zero-day vulnerability in the Gogs self-hosted Git service allows attackers to achieve remote code execution on internet-facing instances. The flaw remains unpatched, posing a security risk.

Microsoft has released patches to address a critical remote code execution vulnerability (CVE-2026-45659) in SharePoint with a CVSS score of 8.8. The flaw, which could be exploited without specialized conditions, is classified as important severity.

Ubiquiti has released security updates addressing three maximum severity vulnerabilities in UniFi OS that can be exploited by remote attackers without requiring special privileges. These patches are critical for protecting UniFi infrastructure from unauthorized remote access.

Google accidentally disclosed details about an unfixed security vulnerability in Chromium that allows JavaScript to execute in the background after the browser is closed, enabling remote code execution on affected devices. The leaked information about this critical flaw poses a significant security risk to users until a patch is developed and released.

An 18-year-old vulnerability in NGINX allows denial of service and potential remote code execution under certain conditions. The flaw was discovered using an autonomous scanning system. This vulnerability can be exploited for malicious purposes.

AI discovered 38 security flaws in OpenEMR's electronic health record platform, which is used by over 100,000 healthcare providers. The vulnerabilities allowed database compromise, remote code execution, and data theft.

GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) in early March that could have allowed attackers to access millions of private repositories. The flaw, if exploited, would have exposed sensitive code and data stored in private GitHub projects.

Cybersecurity researchers discovered a critical remote code execution (RCE) vulnerability in GitHub.com and GitHub Enterprise Server, tracked as CVE-2026-3854 (CVSS score: 8.7). The flaw allows authenticated users with push access to exploit a command injection vulnerability via a single 'git push' command.

A critical Remote Code Execution (RCE) vulnerability, CVE-2026-3854, was disclosed in GitHub, allowing attackers to execute arbitrary code. The flaw, detailed in a Wiz.io blog post, has sparked discussion on Hacker News with 11 comments and 23 upvotes.

A critical remote code execution flaw (CVE-2026-1731) in Bomgar RMM has led to a surge in exploitation attempts, enabling ransomware attacks and supply chain compromises. The vulnerability highlights significant risks in remote monitoring and management tools.

A critical security vulnerability, CVE-2026-5760, in SGLang allows remote code execution via malicious GGUF model files. The flaw, with a CVSS score of 9.8, stems from command injection and affects the high-performance open-source serving framework.

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is being actively exploited for credential theft. The flaw allows attackers to execute arbitrary code without prior authentication, posing significant security risks.

Adobe has released emergency updates to address a critical security flaw in Acrobat Reader (CVE-2026-34621) that is being actively exploited. The vulnerability, rated 8.6 on the CVSS scale, could allow attackers to execute malicious code on affected systems.

A critical remote code execution vulnerability (CVE-2026-39987) in Marimo, a Python data science notebook, was exploited within 10 hours of disclosure. The flaw affects all versions up to a specific release and was identified by Sysdig with a CVSS score of 9.3.

A critical remote code execution vulnerability in Apache ActiveMQ Classic, undetected for 13 years, allows hackers to execute arbitrary commands remotely. Security researchers have identified the flaw, raising concerns about potential exploitation of the outdated system.

A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows unauthenticated arbitrary file uploads, enabling remote code execution. The flaw poses a significant security risk to WordPress users.

A critical vulnerability (CVE-2025-59528) in Flowise, an open-source platform for building LLM apps and agentic systems, is being exploited by hackers to execute arbitrary code. The vulnerability, classified as maximum severity, poses a significant security risk.

A security researcher and AI agents discovered two vulnerabilities in the CUPS print server, allowing unauthenticated remote code execution and root access. The flaws could enable attackers to overwrite files and execute arbitrary code on affected systems.