Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

React2Shell Microsoft SharePoint React Server Components Critical Vulnerabilities CVE-2025-55182 Microsoft SharePoint Server CVE-2026-12569 Insecure Deserialization CVE-2025-10035 Security Patches

HPE Patches Critical RCE Flaw in ArubaOS‑CX Switch Software

HPE is urging customers to upgrade to fixed ArubaOS‑CX releases to block an unauthenticated remote‑code execution vulnerability.

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

CISA Flags Active Exploitation of Critical Gitea RCE

Chrome 152 Fixes 327 Security Flaws After AI‑Fueled Bug Hunt

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Type-Confusion Bug in isolated-vm Lets Sandboxed JavaScript Corrupt Host Memory

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

Clop-Linked Custom Web Shell Targets PTC Windchill

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

Critical SAP Commerce Cloud Flaw Targeted in Early Exploit Attempts

Zoom 'Zoomsday' Flaw Allowed Zero‑Click Device Takeover, Researchers Say

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

JetBrains Patches Critical RCE in TeamCity On‑Premises

Critical RufRoot Flaw Allowed Unauthenticated Control of Ruflo's AI Bridge

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites