Vulnerabilities
AWS Advises of Remote Code Execution Flaw in Amazon Redshift JDBC Driver
A vulnerability in the Amazon Redshift JDBC driver allows remote code execution through unsafe class loading, posing risks to connected applications.
remote code execution
Vulnerabilities
WatchTowr Labs Discloses PaperCut Pre-Auth RCE Chain and Patch Bypasses
WatchTowr Labs has published a research report detailing a chain of vulnerabilities in PaperCut software that allows for pre-authentication remote code execution.
Vulnerabilities
x64dbg-MCP Server Patch Fixes Critical Unauthenticated Remote Code Execution Flaw
A critical vulnerability in the x64dbg-MCP Server plugin allowed unauthenticated attackers to execute arbitrary commands and manipulate memory via default network exposure.
Vulnerabilities
Citrix Urges Immediate Patching for New NetScaler Remote Code Execution Vulnerability
Citrix warns administrators to immediately patch NetScaler ADC and Gateway appliances to address a newly disclosed critical remote code execution flaw.
Vulnerabilities
Critical RCE in Nginx UI Allows Authenticated Admins to Execute Arbitrary Code
Researchers disclosed a critical vulnerability in Nginx UI versions 2.3.8 through 2.5.0 that enables remote code execution via backup restoration.
Vulnerabilities
Apache Camel Karavan Patch Fixes High-Severity Path Traversal Flaw
A critical update addresses a path traversal vulnerability in Apache Camel Karavan that allowed authenticated users to execute code by overwriting files outside the project directory.
Vulnerabilities
Critical RCE vulnerability found in Grid Protection Alliance openPDC and openHistorian
A CVSS 9.8 flaw in Grid Protection Alliance energy software allows remote code execution via unsafe deserialization.
Vulnerabilities
FalkorDB Critical Heap Overflow Allows Remote Code Execution via Bolt Protocol
A critical vulnerability in FalkorDB versions prior to 4.20.0 enables unauthenticated remote attackers to execute arbitrary code or cause denial of service.
Vulnerabilities
FalkorDB Critical Flaw CVE-2026-7827 Allows Remote Code Execution via Buffer Overflow
A critical stack-based buffer overflow in FalkorDB versions prior to 4.18.4 enables remote attackers to execute arbitrary code or cause denial of service.
Vulnerabilities
Critical RCE in Hazelcast IMap Predicates API Affects Versions Before 5.4.5, 5.5.10, and 5.6.1
Missing authorization checks in the Hazelcast IMap Predicates API allow limited-privilege clients to execute arbitrary code on cluster members.
Vulnerabilities
Critical Hazelcast Flaw Allows Arbitrary Memory Reads and Remote Code Execution
CVE-2026-107726 enables malicious clients to crash cluster members and execute code via improper data validation in Java heap and JVM memory.
Vulnerabilities
IBM Guardium Data Protection Vulnerable to Critical Remote Code Execution
A critical path traversal flaw in IBM Guardium allows remote attackers to execute arbitrary code on affected systems.
Vulnerabilities
Citrix Patches Critical Memory Overflow in NetScaler ADC and Gateway
Citrix has released fixes for CVE-2026-107406, a critical memory overflow flaw in NetScaler that enables remote code execution or denial of service.
Vulnerabilities
Critical Unauthenticated RCE Flaw Found in IBM Security Verify Access
A severe vulnerability in IBM access management products allows remote attackers to execute code without credentials via unsafe data deserialization.
Vulnerabilities
Dromara Skyeye Critical Flaw Allows Unauthenticated Remote Code Execution
A missing authentication bug in Dromara Skyeye enables attackers to run arbitrary shell, Python, or PowerShell commands on the host without credentials.
Vulnerabilities
AWS warns of high-severity RCE in Redshift Python driver; no patch available for CVE-2026-8838 yet
A flaw in the amazon-redshift-python-driver allows attackers to execute arbitrary code remotely, prompting an urgent security bulletin from Amazon Web Services.
Vulnerabilities
CISA adds ONLYOFFICE Docs path traversal flaw to Known Exploited Vulnerabilities catalog
The US government mandates remediation for a critical remote code execution flaw in ONLYOFFICE Docs by October 11, 2026.
Vulnerabilities
Cisco Releases Patches for Dozen Critical Vulnerabilities Enabling Remote Code Execution
Cisco has issued fixes for twelve critical security flaws that could allow attackers to execute code remotely or escalate privileges on affected systems.
Vulnerabilities
IBM DataPower Gateway Critical Out-of-Bounds Write Vulnerability Allows Remote Code Execution
A critical flaw in IBM DataPower Gateway enables unauthenticated remote code execution via an out-of-bounds write error across multiple version lines.
Vulnerabilities
Critical Handlebars RCE Vulnerability Bypasses Prototype Deny List
A flaw in the npm Handlebars library allows attackers to execute arbitrary JavaScript by bypassing security checks via the Function constructor.
Vulnerabilities
Handlebars 4.7.9 AST Validation Bypassed in Critical Remote Code Execution Flaw
A critical vulnerability in the popular Handlebars templating engine allows attackers to inject arbitrary JavaScript by bypassing recent security controls.
Vulnerabilities
mJobTime SQL Injection Flaw Allows Unauthenticated Remote Code Execution
A critical vulnerability in mJobTime enables attackers to execute arbitrary SQL commands and achieve remote code execution without authentication.
Vulnerabilities
Cisco Fixes Critical NX-OS NX-API Remote Code Execution Vulnerability
Cisco has released software updates to fix a critical, unauthenticated remote code execution flaw in NX-OS NX-API that allows root access.