Technology ❯ Cybersecurity ❯ Software Vulnerabilities

Remote Code Execution

Veeam Backup and Replication CVE-2025-53770 SAP NetWeaver CVE-2025-43300 SolarWinds Web Help Desk CVE-2025-26399 Hewlett Packard Enterprise CVE-2026-1731 CVE-2026-20841 Grist-Core CVE-2026-22679 CVE-2026-20131 CVE-2026-28446 FreeScout Vulnerability CVE-2026-28289 FreeScout CVE-2026-28289 CVE-2026-20160 Microsoft Products WordPress Vulnerabilities AI-Assisted Exploits TeamCity On-Premises

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Public proof-of-concept code and reports of live attacks have raised urgent risk for unpatched WordPress sites.

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

BeyondTrust Patches Critical Pre-Auth RCE in Remote Access Tools

HPE Urges Immediate Patching for OneView CVE-2025-37164, a CVSS 10 Unauthenticated RCE

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass