Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React Server Components React2Shell CVE-2025-55182 WatchGuard Firebox CVE-2025-21043 CVE-2025-10035 Security Patches Insecure Deserialization Windows Server Update Service VMware vCenter Server CVE-2025-59287 Sitecore Experience Platform D-Link VPN Routers D-Link Routers CVE-2024-43767 Cleo Products Microsoft Remote Code Execution Vulnerabilities CVE-2025-0282 CVE-2025-5262 Netgear Products Game Exploits Game Security Google Looker Apache Tomcat Ivanti Connect Secure CVE-2025-4428 Microsoft CVE-2025-20337 AirPlay Protocol Use-after-free Bug Type-Confusion Bug Patch Management Cisco Identity Services Engine CVE-2026-21877 Windows Server Update Services CVE-2025-6554 Gaming Platforms CVE-2025-50165 Gaming Exploits CVE-2025-47812 CVE-2024-36401 CVE-2025-53770 CVE-2025-53766 Prompt Injection CVE-2025-20281 Trend Micro Apex One Nvidia Triton Inference Server CVE-2025-26784 React Native Community CLI CVE-2025-48530 NVIDIA Triton Inference Server CVE-2025-20265 Cisco Secure Firewall Management Center Software Cisco Secure Firewall Management Center Commvault Apache ActiveMQ Exploits CVE-2025-48539 GeoVision ASManager CVE-2025-7775 CVE-2025-66478 Sitecore Products CVE-2025-54916 CVE-2025-55232 SolarWinds CVE-2025-30247 React JavaScript Library CVE-2025-10547 CVE-2025-61882 Redis Vulnerability CVE-2025-49844 CVE-2025-49844 CVE-2025-59234 WatchGuard Fireware Microsoft Office Vulnerabilities CVE-2025-20352 CVE-2025-59227 CVE-2025-64671 CVE-2025-8110 SolarWinds Web Help Desk Microsoft Word CVE-2025-54100 Cisco Devices BeeStation CVE-2025-48593 CVE-2018-4063 SmarterMail Oracle Identity Manager Deserialization Flaws CVE-2023-21554 Exploitation Techniques Hewlett Packard Enterprise MongoDB Vulnerability Gogs Vulnerability CVE-2025-37164 Critical Vulnerabilities CVE-2026-20045 Endpoint Manager Mobile Malicious Payloads CVE-2025-40553 Microsoft SharePoint Server

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

A vendor fix is available in SmarterMail build 9511, heightening the push to patch under federal KEV directives.

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Cisco Patches Actively Exploited RCE in Unified Communications and Webex Calling

Microsoft’s January Patch Tuesday Fixes 112 Flaws, Confirms DWM Zero-Day Exploited

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

Critical 'Ni8mare' Flaw Exposes n8n Servers to Full Takeover as Scans Surge

CISA Adds HPE OneView, Microsoft Office Flaws to Exploited Vulnerabilities List

RondoDox Botnet Uses React2Shell to Hijack Next.js Servers and IoT Devices

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

HPE Urges Immediate Patching for OneView CVE-2025-37164, a CVSS 10 Unauthenticated RCE

Google Links More State Groups to React2Shell as Wallet-Draining Attacks Spread

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

React Issues New RSC Patches as React2Shell Attacks Escalate and EtherRAT Surfaces

Microsoft’s December Patch Tuesday Fixes 57 Flaws, Including Exploited Windows Zero-Day

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline