Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell Microsoft SharePoint React Server Components Critical Vulnerabilities CVE-2025-55182 Security Patches VMware vCenter Server Microsoft SharePoint Server CVE-2025-53521 Windows Server Update Service CVE-2025-59287 CVE-2025-21043 CVE-2025-10035 Insecure Deserialization Apache ActiveMQ WatchGuard Firebox Oracle Identity Manager F5 BIG-IP APM CVE-2026-12569 CVE-2026-86218 Exploitation Techniques Malicious Payloads CVE-2025-40551 Cisco SPA 300 and SPA 500 CVE-2025-50176 HPE Aruba Networking Mitigation Measures CUPS Vulnerabilities Zimbra Mail Servers Authentication Bypass Sitecore Experience Platform FortiClient EMS D-Link VPN Routers D-Link Routers CVE-2024-43767 Cleo Products Microsoft Remote Code Execution Vulnerabilities CVE-2026-45659 CVE-2025-0282 CVE-2025-5262 Netgear Products Game Exploits Game Security Google Looker Apache Tomcat Ivanti Connect Secure CVE-2025-4428 Microsoft CVE-2025-20337 CVE-2026-6973 AirPlay Protocol CVE-2026-39987 CVE-2026-33824 Use-after-free Bug Type-Confusion Bug Patch Management Cisco Identity Services Engine CVE-2026-21877 Windows Server Update Services WordPress Exploits CVE-2025-6554 Gaming Platforms CVE-2025-50165 Gaming Exploits CVE-2026-85102 CVE-2025-47812 CVE-2024-36401 CVE-2025-53770 CVE-2025-53766 Prompt Injection CVE-2025-20281 Trend Micro Apex One Nvidia Triton Inference Server CVE-2025-26784 React Native Community CLI CVE-2025-48530 n8n NVIDIA Triton Inference Server CVE-2025-20265 Cisco Secure Firewall Management Center Software Cisco Secure Firewall Management Center Commvault Exploits CVE-2025-48539 GeoVision ASManager CVE-2025-7775 CVE-2026-33827 CVE-2025-66478 Sitecore Products CVE-2025-54916 CVE-2025-0520 CVE-2025-55232 SolarWinds CVE-2025-30247 React JavaScript Library CVE-2025-10547 CVE-2025-61882 Redis Vulnerability CVE-2025-49844 CVE-2025-49844 CVE-2026-59726

16 ARTICLES

last mo.

Citrix Patches Two NetScaler Zero‑Days Exploited in the Wild

CISA has ordered rapid federal remediation as active global exploitation and limited detection tools leave many internet‑facing appliances at immediate risk.

7 ARTICLES

last mo.

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

7 ARTICLES

last mo.

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

6 ARTICLES

2mo ago

CISA Flags Active Exploitation of Critical Gitea RCE

3 ARTICLES

2mo ago

Chrome 152 Fixes 327 Security Flaws After AI‑Fueled Bug Hunt

6 ARTICLES

2mo ago

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

3 ARTICLES

2mo ago

Type-Confusion Bug in isolated-vm Lets Sandboxed JavaScript Corrupt Host Memory

3 ARTICLES

2mo ago

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

5 ARTICLES

2mo ago

Clop-Linked Custom Web Shell Targets PTC Windchill

4 ARTICLES

2mo ago

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

3 ARTICLES

2mo ago

Critical SAP Commerce Cloud Flaw Targeted in Early Exploit Attempts

17 ARTICLES

2mo ago

Zoom 'Zoomsday' Flaw Allowed Zero‑Click Device Takeover, Researchers Say

Remote Code Execution

Citrix Patches Two NetScaler Zero‑Days Exploited in the Wild

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

AI-Built Exploit Used to Take Over OpenAI Staff Accounts

Cisco Issues Emergency Patch for Maximum‑Severity ISE Zero‑Day

N‑able Issues Emergency Hotfix for Critical N‑central Zero‑Day

LG Smart TVs Found Logging Audio and Scanning Home Networks

N-able Issues Emergency Hotfix for Pre-Auth RCE in N-central

HPE Patches Critical RCE Flaw in ArubaOS‑CX Switch Software

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

Never miss stories about

Remote Code Execution

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

CISA Flags Active Exploitation of Critical Gitea RCE

Chrome 152 Fixes 327 Security Flaws After AI‑Fueled Bug Hunt

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Type-Confusion Bug in isolated-vm Lets Sandboxed JavaScript Corrupt Host Memory

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

Clop-Linked Custom Web Shell Targets PTC Windchill

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

Critical SAP Commerce Cloud Flaw Targeted in Early Exploit Attempts

Zoom 'Zoomsday' Flaw Allowed Zero‑Click Device Takeover, Researchers Say

Never miss stories about

Remote Code Execution