Vulnerabilities
PHP2Shell Leaks Expose Critical RCE Flaws Ahead of October Patch Release
Leaked details of two critical PHP vulnerabilities have triggered urgent patching warnings from the project maintainers and security firms.
Remote Code Execution
Everything RedTeam Monitor has reported about Remote Code Execution: 20 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Authenticated Attacker Can Execute Code on Totolink X2000R Router
A critical flaw in the X2000R allows remote code execution via a crafted HTTP request, requiring only valid login credentials to trigger.
Vulnerabilities
NVD Adds CVE-2026-41222: TOTOLINK X2000R boa Server Stack Overflow Enables Post-Auth Code Execution
A critical stack overflow in the X2000R's web server lets attackers run code after logging in, according to new National Vulnerability Database records.
Vulnerabilities
Mercury 3.2.6 Patches CVE-2026-111058, Blocking Unauthenticated Python Code Execution on Servers
Attackers could run arbitrary Python code on Mercury servers without credentials. Version 3.2.6 patches the vulnerability that allowed anonymous kernel creation and execution.
Vulnerabilities
Apache Camel Vulnerability Allows Remote Code Execution via Deserialization
A critical flaw in Apache Camel enables remote code execution by allowing unrestricted deserialization of data within Hazelcast components.
Cyber Attacks
Collabora Fixes Remote Code Execution in Nextcloud's Built-in Office Server
Attackers planted web shells on Nextcloud servers using a flaw in the optional Collabora app. A patch is available for versions prior to 26.4.303.
Vulnerabilities
MariaDB Flaw Enables Remote Code Execution When Combined With Another Vulnerability
A critical use-after-free flaw in MariaDB enables remote code execution when combined with another vulnerability. Affected servers should apply the vendor patch.
Vulnerabilities
Microsoft warns of critical iSCSI flaw allowing remote code execution
An unauthenticated attacker can run arbitrary code on Windows systems by exploiting a memory error in the iSCSI service, according to Microsoft.
Vulnerabilities
Microsoft IIS Buffer Overflow Lets Attackers Run Code Remotely
A critical flaw in Windows Internet Information Services allows unauthorized remote code execution via a stack-based buffer overflow.
Vulnerabilities
Microsoft Confirms Unauthenticated RCE in Windows Error Reporting
A heap overflow in Windows Error Reporting lets attackers run code remotely without credentials, earning a critical 9.8 CVSS score.
Vulnerabilities
Critical Auth Flaw in Adobe Commerce Lets Attackers Run Code
A high-severity authorization error in Adobe Commerce and Magento Open Source allows remote attackers to execute arbitrary code without user interaction.
Vulnerabilities
AES Key Flaw in NetEase Cloud Music Windows Lets Attackers Execute Arbitrary Local Binaries
A flaw in the Windows music app allows attackers to run local binaries by injecting content into the renderer process via an unvalidated API.
Vulnerabilities
Update Handlebars to 4.7.10 to block CVE-2026-106445 RCE prototype bypass
A critical remote code execution vulnerability in the Handlebars template engine is resolved in version 4.7.10, which stops attackers from bypassing security filters.
Vulnerabilities
Handlebars 4.7.10 Released to Fix Critical RCE Vulnerability in Versions 4.0.0-4.7.9
A critical remote code execution vulnerability in the Handlebars template engine allows attackers to inject arbitrary JavaScript via manipulated AST objects.
Vulnerabilities
Version 1.7.1 patches CVSS 8.5 unauthenticated OS command execution flaw CVE-2026-107322 in databases-on-aws
A CVSS 8.5 flaw in the databases-on-aws plugin allowed attackers to run OS commands. Version 1.7.1 resolves the issue.
Vulnerabilities
Single Request Triggers Full System Takeover in mJobTime via SQLi in Login.aspx Up to Build 15.7.3.32
A critical SQL injection in mJobTime’s admin panel allows unauthenticated remote code execution with full system privileges through builds 15.7.3.32.
Vulnerabilities
Dromara Skyeye Exposes Servers to Critical 9.3 Script Injection Without Vendor Patch
A missing authentication bug in Dromara Skyeye allows remote attackers to execute arbitrary scripts on host systems without logging in.
Vulnerabilities
Unauthenticated Attackers Can Run Windows Commands via Dromara Skyeye Flaw
A critical command injection bug in the Dromara Skyeye monitoring tool allows remote attackers to execute arbitrary PowerShell code on Windows servers without a login.
Vulnerabilities
IBM Identity Access Software Has Critical Deserialization Flaw Allowing Remote Code Execution
Unauthenticated attackers can exploit CVE-2026-78406 in IBM Security Verify Access to run arbitrary code, a risk rated 9.8 by NVD.
Vulnerabilities
Authenticated Hackers Can Execute Code Via Critical Flaw in IBM Security Verify Products
A critical vulnerability in IBM identity products allows authenticated attackers to run arbitrary code on affected systems.