Tag: RCE
SAP patches maximum-severity flaw in Commerce Cloud data adapter
SAP's August update fixes a CVSS 10.0 hole letting unauthenticated attackers run code in Commerce Cloud.
Zoom annotation bug lets meeting peers seize devices without clicks
A zero-click Zoom flaw lets any meeting participant take over another attendee's device through the annotation feature.
Belgian eID add-on flaws let sites forge legal signatures
A researcher found the Connective browser extension used by two million Belgians could be abused to read card data, steal…
WordPress ships emergency fix for pre-auth XSS to RCE chain
WordPress ships an emergency fix for a pre-auth XSS chain that ends in PHP code execution.
Command injection hole in LoadMaster lands on CISA list
Federal agencies have days to patch an exploited Progress ADC bug that drew hundreds of attack attempts.
Gitea patch blocks RCE that turned patches into git hooks
CVE-2026-60004 lets a repository writer plant a git hook and run commands as the Gitea service account.
Kimi K3 AI agents discover Redis zero-days and build working RCE exploits
Chinese AI agents from Kimi K3 autonomously found zero-day vulnerabilities in Redis and developed functional remote code execution exploits.
Uploaded SVG images could hijack Microsoft Bing servers with system rights
Attackers could achieve SYSTEM-level code execution on Bing servers by uploading crafted SVG files through two chained vulnerabilities.