Tag

Rce

All articles tagged with #rce

technology17 days ago•4 min saved

WordPress XSS Chain Could Trigger Remote Code Execution, Patch Issued

Researchers disclosed a pre-auth, reflected XSS in WordPress login that can chain into PHP code execution on a site administrator's visit, via a multi-step path involving REST/JSONP calls and an attacker-controlled payload; the flaw, CVE-2026-64638, is rated 8.9/10 and affects all versions prior to the fix; WordPress released 7.0.3 on Aug 6 with backports to the 4.7 branch, and sites should update immediately; no known active exploits as of Aug 7.

via The Hacker News|

#cve-2026-64638 #rce #security

security1 month ago•2 min saved

Public PoC Sparks Active Exploitation of Critical SharePoint RCE CVE-2026-50522

Microsoft patched CVE-2026-50522, a critical deserialization-based RCE in SharePoint Server, but a public PoC and threat intel indicate active exploitation of on‑prem deployments. The flaw allows remote code execution over the network, potentially by an attacker authenticated as a Site Owner, enabling arbitrary code execution and theft of IIS machine keys for persistence. Defenders should rotate credentials and deploy patches; CISA warns that multiple SharePoint vulnerabilities are being exploited across supported on‑premises versions.

via The Hacker News|

#active-exploitation #cve-2026-50522 #deserialization

technology1 month ago•3 min saved

7-Zip patches XZ-based remote code execution flaw

7-Zip released version 26.02 to fix a remote code execution vulnerability in XZ data processing that could be exploited via specially crafted archives, with a heap-based buffer overflow fixed by added boundary checks. Exploitation requires user interaction, and there’s no automatic update, so users must manually install the patch from 7-zip.org. No active exploits are reported yet, but phishing or social engineering could deliver malicious archives, as archive vulnerabilities have been exploited in the past.

via BleepingComputer|

#patch #rce #seven-zip

technology1 month ago•5 min saved

Public PoCs Push Urgent Patch for WordPress wp2shell RCE

Public proof-of-concept exploits have surfaced for two chained WordPress Core flaws (CVE-2026-63030 and CVE-2026-60137) enabling unauthenticated remote code execution on WordPress 6.9.x and 7.0.x. WordPress released fixes in 6.9.5 and 7.0.2 with forced auto-updates; admins should patch immediately. Mitigations include blocking anonymous REST API access or specific endpoints, and Cloudflare has WAF protections. Tools like wp2shell.com let admins test vulnerability.

via BleepingComputer|

#cve-2026-60137 #cve-2026-63030 #rce

cyber-security1 month ago•24 min saved

Emergency Patch Rolled Out After wp2shell RCE Threat Targets WordPress

A critical, pre-authentication remote code execution flaw named wp2shell in WordPress Core affects roughly 500 million+ sites. It stems from a REST API batch-route confusion that enables unauthenticated attackers to execute code on vulnerable WordPress installations. The issue affects WordPress core versions 6.9.0–6.9.4, 7.0.0–7.0.1 (and 7.1 beta); fixes have been shipped in WordPress 7.0.2 with backports to 6.8.6 and 6.9.5. WordPress is auto-updating affected sites, and admins should update immediately. If patching isn’t possible yet, block anonymous REST API access or the batch endpoints as temporary mitigations and use the wp2shell.com scanner to check exposure.

via CyberSecurityNews|

#cve-2026-60137 #cve-2026-63030 #cyber-security

cybersecurity1 month ago•3 min saved

Unauthenticated WordPress core flaw forces urgent updates across 6.9/7.0 lines

An anonymous HTTP request can trigger remote code execution in WordPress core on affected 6.9.x and 7.0.x releases via the REST batch endpoint. WordPress patched 6.9.5 and 7.0.2 on July 17, 2026, after auto-updates began rolling out, but some sites may still be vulnerable if they didn’t receive the update. Mitigations before updating include blocking the batch endpoints at /wp-json/batch/v1 and rest_route=/batch/v1, disabling the REST API, or using a drop-in to filter anonymous batch requests. There is no CVE yet, and a tester at wp2shell.com lets site owners check exposure. The exact number of affected sites is unclear, though the vulnerable window covers recent WordPress releases only.

via The Hacker News|

#batch-endpoint #cybersecurity #pre-auth

technology2 months ago•4 min saved

Active Exploitation of Critical Netlogon Flaw Prompting Immediate Patch urged

Belgium’s national cybersecurity authority warns threat actors are actively exploiting CVE-2026-41089, a critical Netlogon vulnerability patched in May 2026, to achieve remote code execution on domain controllers across all supported Windows Server versions; admins should patch immediately as exploitation is underway and advisories from Microsoft have not yet been updated.

via BleepingComputer|

#cve-2026-41089 #netlogon #patch-tuesday

security2 months ago•2 min saved

Gogs RCE Flaw Lets Authenticated Users Run Code via Git Rebase

Rapid7 reports a critical Gogs vulnerability (CVSS 9.4) that lets any authenticated user achieve remote code execution by crafting a pull request with a malicious branch name that injects a --exec command into git rebase during the Rebase before merging step; no admin rights are required and an attacker can trigger it simply by registering and creating a repository with rebase merging enabled. If unpatched (as of March 17, 2026), this could allow server compromise, access to all repos, credential dumps, cross-tenant data breaches, or further network access. Mitigations include disabling new registrations, restricting repository creation, and auditing rebase merge settings; a Metasploit module exists to automate the exploit. Estimates put internet-facing Gogs instances around 1,141, likely higher in internal deployments behind VPNs.

via The Hacker News|

#git #gogs #mitigations

cybersecurity3 months ago•57 min saved

Millions at Risk as NGINX Zero-Day RCE Flaw Sees Real-World Exploitation

Security researchers say CVE-2026-42945, a heap buffer overflow in NGINX Open Source and NGINX Plus, is being actively exploited in the wild. The flaw can crash NGINX worker processes via crafted requests, with remote code execution possible only if ASLR is disabled and a specific rewrite configuration is present; despite ASLR generally enabled, estimates show up to 5.7 million internet-facing servers may be affected. Organizations should patch promptly, ensure ASLR remains enabled, and audit rewrite rules to mitigate risk while threat actors rapidly scan for vulnerable systems.

via CyberSecurityNews|

#cve-2026-42945 #cybersecurity #exploitation

cyber-security-news3 months ago•56 min saved

Claude Code CLI RCE via Malicious Deeplinks Prompted Quick Patch (2.1.118)

A critical remote code execution vulnerability in Anthropic’s Claude Code CLI allowed attackers to execute arbitrary commands through crafted deeplinks. The flaw came from a context-blind argument parser that treated --settings overrides found inside a deeplink’s q parameter as legitimate, enabling injection of a SessionStart hook at startup. Anthropic released a fix in Claude Code 2.1.118 and urged users to update; the issue highlights the risks of eager CLI parsing and deeplink handling.

via CyberSecurityNews|

#claude-code #cli #cyber-security-news

cyber-security3 months ago•57 min saved

18-Year-Old NGINX Flaw Triggers Unauthenticated Remote Code Execution

A severe heap-buffer-overflow bug in NGINX’s ngx_http_rewrite_module (CVE-2026-42945, CVSS 9.2) allows unauthenticated remote code execution when rewrite and set directives are used together, affecting NGINX Open Source 0.6.27–1.30.0 and several F5/NGINX products; a working PoC is public. Patch guidance includes upgrading to NGINX 1.30.1 or 1.31.0 and auditing configurations that combine rewrite+set directives, with a recommendation to add a WAFlayer until patching is complete. Additional related CVEs include CVE-2026-42946 (high severity, memory corruption), CVE-2026-40701 (medium, use-after-free), and CVE-2026-42934 (medium, out-of-bounds read).

via CyberSecurityNews|

#cve-2026-42945 #cyber-security #heap-buffer-overflow

security3 months ago•5 min saved

18-year-old NGINX flaw raises DoS risk and possible RCE in certain configs

An 18-year-old heap buffer overflow in NGINX's rewrite_module (CVE-2026-42945) can cause denial of service and, under specific rewrite configurations, unauthenticated remote code execution. Patches are available in NGINX Open Source 1.31.0 and 1.30.1 and related F5 products; real-world exploitability is debated, but the DoS risk makes patching or applying mitigations urgent, especially where ASLR is disabled to enable RCE in PoC tests.

via BleepingComputer|

#cve-2026-42945 #dos #nginx

technology4 months ago•4 min saved

Rogue researcher releases second Windows Defender exploit, threatens more RCEs

A rogue researcher, Nightmare-Eclipse, released a second Windows Defender privilege-escalation exploit (RedSun) after Microsoft patched the first CVE-2026-33825 vulnerability. The PoC allegedly lets unprivileged users gain SYSTEM privileges by abusing Defender to overwrite system files; the researcher warns of more remote code execution exploits to come. Microsoft patched the flaw on Patch Tuesday and credited Zen Dodd and Yuanpei Xu, while the researcher continues to air grievances and threaten further disclosures.

via Cybernews|

#exploit #microsoft #privilege-escalation

technology4 months ago•3 min saved

F5 BIG-IP APM Flaw Upgraded to Active RCE Risk, Urgency to Patch

F5 Networks reclassified the BIG-IP APM vulnerability CVE-2025-53521 from a DoS issue to a critical remote code execution flaw, with attackers exploiting unpatched systems to deploy webshells. CISA has ordered federal agencies to patch, and F5 issued mitigations and indicators of compromise as online exposure of BIG-IP instances remains high. Patch now and review disks, logs, and terminal history for signs of intrusion.

via BleepingComputer|

#big-ip #cve-2025-53521 #f5

security5 months ago•24 min saved

Ancient Telnet Hole Sparks Modern Worry: CVE-2026-32746 Pre-Auth RCE in Telnetd

Researchers analyze CVE-2026-32746, a pre-auth RCE in GNU inetutils Telnetd via a LINEMODE SLC buffer overflow. The issue stems from overflowing a small slcbuf when processing SLC triplets during LINEMODE negotiation, with exploitation heavily dependent on OS and architecture (64-bit vs 32-bit); while a reliable full RCE wasn't achieved across tested targets, a heap leak and an arbitrary-free primitive were demonstrated, potentially enabling code execution under favorable libc conditions. The vulnerability affects inetutils Telnetd and many forks across major distros (Ubuntu, Debian, FreeBSD, NetBSD, macOS, etc.), and patches have not been widely released at publication time. Detection strategies include probing for LINEMODE support and non-invasive overflow checks; watchTowr provides a detection artifact generator. Patch urgently, but note there is no universal fixed version yet; users should build from fixed commits or apply vendor mitigations.

via watchTowr Labs|

#cve-2026-32746 #inetutils #memory-corruption