Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell React Server Components CVE-2025-55182 Insecure Deserialization VMware vCenter Server CVE-2025-10035 CVE-2025-59287 Security Patches Windows Server Update Service Critical Vulnerabilities

CISA Adds Wing FTP Server Flaw to KEV, Orders Federal Fix by March 30

The listing elevates urgency due to public exploit code plus prior abuse of a related RCE.

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

Exploit-Driven Hacks Overtake Credential Abuse in Cloud Breaches, Google Warns

CISA Adds VMware Aria Operations RCE to KEV With Federal Fix Due March 24

Zyxel Patches Critical UPnP Flaw Enabling Remote Code Execution Across Many Routers

Researchers Expose Critical Flaws in Popular VS Code Extensions Downloaded Over 125 Million Times

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

BeyondTrust Patches Critical Pre-Auth RCE in Remote Access Tools

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

CISA Forces Three-Day Patch for Actively Exploited SolarWinds Web Help Desk Flaw

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Cisco Patches Actively Exploited RCE in Unified Communications and Webex Calling

Microsoft’s January Patch Tuesday Fixes 112 Flaws, Confirms DWM Zero-Day Exploited

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

Critical 'Ni8mare' Flaw Exposes n8n Servers to Full Takeover as Scans Surge

CISA Adds HPE OneView, Microsoft Office Flaws to Exploited Vulnerabilities List

RondoDox Botnet Uses React2Shell to Hijack Next.js Servers and IoT Devices

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out