Technology ❯ Cybersecurity ❯ Software Vulnerabilities

Remote Code Execution

PHP2Shell PHP2Shell CVE-2026-109618 and CVE-2026-109619 PHP CVE-2026-109618 and CVE-2026-109619 Unauthenticated PHP Server Exploitation Veeam Backup and Replication CVE-2025-53770 SAP NetWeaver CVE-2025-43300 SolarWinds Web Help Desk CVE-2025-26399

Alpine Rebuilds GitLab After Attempted Remote Code Execution Using Critical Onigmo Flaw

Missing logs plus an unpatched Ruby runtime left Alpine unable to rule out code execution and prompted a full rebuild and credential rotation.

Alpine Rebuilds GitLab After Near-Exploit of Critical CVE-2026-97229

Node.js Patches 'Node2Shell' Brotli Bug After RCE Demonstration

GitLab Patches Maximum‑Severity RCE Flaw Affecting Releases Back to 2014

Plex2Shell Exploit Turns Unpatched Plex Servers Into Miners and Proxy Nodes

Attackers Chain Two AhsayCBS Flaws to Deploy Disguised Monero Miners

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

BeyondTrust Patches Critical Pre-Auth RCE in Remote Access Tools

HPE Urges Immediate Patching for OneView CVE-2025-37164, a CVSS 10 Unauthenticated RCE

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass