Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell React Server Components Critical Vulnerabilities Microsoft SharePoint CVE-2025-55182 F5 BIG-IP APM CVE-2025-10035 Security Patches Insecure Deserialization WatchGuard Firebox

5 ARTICLES

last wk.

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

The deserialization flaw allows low‑privilege authenticated users to run code on vulnerable SharePoint servers, raising urgent risk for unpatched systems.

8 ARTICLES

last wk.

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

7 ARTICLES

2mo ago

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

4 ARTICLES

2mo ago

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

3 ARTICLES

2mo ago

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

9 ARTICLES

2mo ago

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

23 ARTICLES

2mo ago

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

3 ARTICLES

3mo ago

Marimo RCE Exploited Within Hours of Disclosure

4 ARTICLES

3mo ago

Apache ActiveMQ Classic RCE Patched After AI-Assisted Discovery

4 ARTICLES

3mo ago

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

5 ARTICLES

3mo ago

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

Remote Code Execution

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

Veeam Patch Closes Critical RCE That Threatened Backup Servers

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Microsoft Patches High-Severity SharePoint Deserialization RCE

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

Never miss stories about

Remote Code Execution

Fortinet Patches Critical Flaws Allowing Unauthenticated RCE in FortiSandbox and FortiAuthenticator

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Critical Gemini CLI RCE That Threatened CI/CD Workflows

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Marimo RCE Exploited Within Hours of Disclosure

Apache ActiveMQ Classic RCE Patched After AI-Assisted Discovery

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

Never miss stories about

Remote Code Execution