Remote Code Execution Archives • Page 2 of 30 • Daily CyberSecurity

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed AnyDesk RCE vulnerability AnyPwn pre-auth exploit code publicly disclosed

AnyDesk RCE vulnerability AnyPwn pre-auth exploit code publicly disclosed

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed

Do Son October 12, 2026

TL;DR Researchers at V12 released public proof-of-concept exploit code for a pre-auth remote code execution flaw in...

Citrix Warns of Critical NetScaler SAML Flaw CVE-2026-107406 That Can Lead to Remote Code Execution Citrix NetScaler vulnerability CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway can lead to remote code execution

Citrix NetScaler vulnerability CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway can lead to remote code execution

Citrix Warns of Critical NetScaler SAML Flaw CVE-2026-107406 That Can Lead to Remote Code Execution

Do Son October 9, 2026

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and...

IBM Patches 23 DataPower Gateway Flaws, Including Four Critical Remote Code Execution and XSS Bugs IBM DataPower Gateway vulnerabilities CVE-2026-15762 and CVE-2026-16340 remote code execution and CVE-2026-14990 XSS fixed in 11.0.0.3

IBM DataPower Gateway vulnerabilities CVE-2026-15762 and CVE-2026-16340 remote code execution and CVE-2026-14990 XSS fixed in 11.0.0.3

IBM Patches 23 DataPower Gateway Flaws, Including Four Critical Remote Code Execution and XSS Bugs

Do Son October 8, 2026

TL;DR IBM has released fixes for 23 IBM DataPower Gateway vulnerabilities across two security bulletins. Four rate...

Splunk Patches 22 Flaws in Splunk Enterprise, Including Critical Patroni API Command Execution Bug Splunk Enterprise vulnerabilities CVE-2026-76268 Patroni REST API command execution and CVE-2026-76281 fixed in 10.4.3 and 10.2.7

Splunk Enterprise vulnerabilities CVE-2026-76268 Patroni REST API command execution and CVE-2026-76281 fixed in 10.4.3 and 10.2.7

Splunk Patches 22 Flaws in Splunk Enterprise, Including Critical Patroni API Command Execution Bug

Do Son October 8, 2026

TL;DR Splunk has released two advisories that fix 22 Splunk Enterprise vulnerabilities across four supported branches. The...

Cisco Fixes Critical NX-API Flaw CVE-2026-76471 and Ships NX-OS Hardening Release for Six Bug Classes Cisco NX-OS vulnerabilities CVE-2026-76471 NX-API remote code execution and CVE-2026-76455 fixed in October 2026 hardening release

Cisco NX-OS vulnerabilities CVE-2026-76471 NX-API remote code execution and CVE-2026-76455 fixed in October 2026 hardening release

Cisco Fixes Critical NX-API Flaw CVE-2026-76471 and Ships NX-OS Hardening Release for Six Bug Classes

Do Son October 7, 2026

TL;DR Cisco has fixed a critical NX-API flaw, CVE-2026-76471, that could let an unauthenticated attacker run code...

Cisco Patches Four Critical Nexus Switch Flaws That Allow Root-Level Remote Code Execution Cisco Nexus vulnerabilities CVE-2026-76485 and CVE-2026-76465 NGOAM and MPLS OAM remote code execution on Nexus 3000 and 9000 switches

Cisco Nexus vulnerabilities CVE-2026-76485 and CVE-2026-76465 NGOAM and MPLS OAM remote code execution on Nexus 3000 and 9000 switches

Cisco Patches Four Critical Nexus Switch Flaws That Allow Root-Level Remote Code Execution

Do Son October 7, 2026

TL;DR Cisco has released fixes for four critical Cisco Nexus vulnerabilities, each rated 9.8 on CVSS. The...

Argo CD Patches Four Critical CVSS 9.9 Flaws Affecting the Repo-Server and AppProject Controls Argo CD vulnerabilities CVE-2026-77459 AppProject bypass and repo-server command execution flaws fixed in v3.5.4

Argo CD vulnerabilities CVE-2026-77459 AppProject bypass and repo-server command execution flaws fixed in v3.5.4

Argo CD Patches Four Critical CVSS 9.9 Flaws Affecting the Repo-Server and AppProject Controls

Do Son October 7, 2026

TL;DR The Argo CD project has fixed four critical security flaws, each rated 9.9 on CVSS. Three...

HPE Fixes Six Critical AOS-Switch Flaws Enabling Unauthenticated RCE and Admin Access HPE AOS-Switch vulnerabilities CVE-2026-76744 and CVE-2026-76742 unauthenticated remote code execution and authentication bypass fixed in AOS-S 16.11.0032

HPE AOS-Switch vulnerabilities CVE-2026-76744 and CVE-2026-76742 unauthenticated remote code execution and authentication bypass fixed in AOS-S 16.11.0032

HPE Fixes Six Critical AOS-Switch Flaws Enabling Unauthenticated RCE and Admin Access

Do Son October 7, 2026

TL;DR HPE Networking has patched nine HPE AOS-Switch vulnerabilities, and six of them rate Critical. The worst...

Handlebars.js RCE Flaws Disclosed With Public PoC, Threatening 172 Million Monthly Downloads Handlebars.js vulnerability CVE-2026-106445 and CVE-2026-106446 remote code execution flaws with public PoC fixed in version 4.7.10

Handlebars.js vulnerability CVE-2026-106445 and CVE-2026-106446 remote code execution flaws with public PoC fixed in version 4.7.10

Handlebars.js RCE Flaws Disclosed With Public PoC, Threatening 172 Million Monthly Downloads

Do Son October 7, 2026

TL;DR Maintainers of Handlebars.js have patched two critical flaws that can lead to remote code execution. Each...

HPE Patches 28 ClearPass Policy Manager Flaws, Including Unauthenticated RCE Bugs HPE ClearPass Policy Manager vulnerabilities CVE-2026-76750 and CVE-2026-76752 unauthenticated RCE and authentication bypass fixed in CPPM 6.14.1

HPE ClearPass Policy Manager vulnerabilities CVE-2026-76750 and CVE-2026-76752 unauthenticated RCE and authentication bypass fixed in CPPM 6.14.1

HPE Patches 28 ClearPass Policy Manager Flaws, Including Unauthenticated RCE Bugs

Do Son October 7, 2026

TL;DR HPE Networking has fixed 28 ClearPass Policy Manager vulnerabilities in a single advisory, and ten of...

Veeam Patches Critical Backup & Replication RCE Flaw CVE-2025-64393 and Two More Bugs Veeam Backup vulnerability CVE-2025-64393 remote code execution fixed in build 12.3.2.4934

Veeam Patches Critical Backup & Replication RCE Flaw CVE-2025-64393 and Two More Bugs

Do Son October 6, 2026

TL;DR Veeam has fixed three flaws in Backup & Replication version 12, led by CVE-2025-64393. This critical...

Researchers Publish Full Details and PoC Exploit for a WordPress libheif RCE Chain WordPress libheif RCE chain exploiting GHSA-x8r2-mggj-j6wr heap overflow via authenticated HEIC image upload

WordPress libheif RCE chain exploiting GHSA-x8r2-mggj-j6wr heap overflow via authenticated HEIC image upload

Researchers Publish Full Details and PoC Exploit for a WordPress libheif RCE Chain

Do Son October 6, 2026

TL;DR Fortbridge researcher Adrian Tiron has published a working proof-of-concept for a WordPress libheif RCE chain. It...

PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277 LibreOffice Calc vulnerability CVE-2026-63277 code execution with public PoC, plus file read and write flaws CVE-2026-63266 and CVE-2026-63267

LibreOffice Calc vulnerability CVE-2026-63277 code execution with public PoC, plus file read and write flaws CVE-2026-63266 and CVE-2026-63267

PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277

Do Son October 6, 2026

TL;DR The Document Foundation has fixed six flaws in LibreOffice, led by CVE-2026-63277, a LibreOffice Calc vulnerability...

IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws Langflow vulnerabilities fixed in Langflow 1.12.3 including critical CVE-2026-104334 and CVE-2026-93674 remote code execution

Langflow vulnerabilities fixed in Langflow 1.12.3 including critical CVE-2026-104334 and CVE-2026-93674 remote code execution

IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws

Do Son October 6, 2026

TL;DR IBM has published a security bulletin covering 25 Langflow vulnerabilities in Langflow OSS versions 1.0.0 through...

AMD RCCL Vulnerability Could Enable Remote Code Execution on Instinct GPU Clusters AMD RCCL vulnerability CVE-2026-43598 in the ROCm Communication Collectives Library on AMD Instinct GPUs

AMD RCCL vulnerability CVE-2026-43598 in the ROCm Communication Collectives Library on AMD Instinct GPUs

AMD RCCL Vulnerability Could Enable Remote Code Execution on Instinct GPU Clusters

Do Son October 6, 2026

TL;DR AMD has disclosed CVE-2026-43598, an AMD RCCL vulnerability rated 7.7 on CVSS 4.0. The flaw sits...

Perforce Fixes Six P4 Search Vulnerabilities, Including a CVSS 10 Default Token Flaw Perforce P4 Search vulnerabilities CVE-2026-100103 default token and CVE-2026-100102 exposed Java debug interface in P4 Search

Perforce P4 Search vulnerabilities CVE-2026-100103 default token and CVE-2026-100102 exposed Java debug interface in P4 Search

Perforce Fixes Six P4 Search Vulnerabilities, Including a CVSS 10 Default Token Flaw

Do Son October 5, 2026

TL;DR Perforce has patched six P4 Search vulnerabilities in version 2026.4.2. The worst, CVE-2026-100103, scores a perfect...

Apache OpenOffice vulnerability CVE-2026-59265 alongside Apache Directory LDAP API flaw CVE-2026-103877 and Traffic Server CVE-2026-102795

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

Do Son October 3, 2026

TL;DR The Apache Software Foundation disclosed eight CVEs on October 2, 2026, across three projects. The most...

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands GitLab AI Gateway vulnerability CVE-2026-90970 lets Duo Agent Platform users escape the prompt template sandbox

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

Do Son October 2, 2026

TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway...

OpenBao Security Vulnerabilities Enable Code Execution Diagram of critical OpenBao security vulnerabilities and secret storage fixes

OpenBao Security Vulnerabilities Enable Code Execution

Do Son October 2, 2026

TL;DR OpenBao maintainers issued security updates to address two critical flaws in the secrets management platform. These...

PoC Exploit Released for Next.js RCE Flaw CVE-2026-94545 Next.js RCE CVE-2026-94545 proof-of-concept exploit publicly disclosed

PoC Exploit Released for Next.js RCE Flaw CVE-2026-94545

Do Son October 1, 2026

TL;DR Technical details and a working proof-of-concept exploit are now public for CVE-2026-94545, a critical Next.js RCE...

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical

Do Son September 30, 2026

TL;DR HPE Networking disclosed 18 HPE Instant ON vulnerabilities on September 29, 2026, in its Instant ON...

WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE WatchGuard Fireware OS vulnerabilities including critical BOVPN Over TLS code injection CVE-2026-86131 and pre-auth fingerd overflow CVE-2026-81433 on Firebox appliances

WatchGuard Fireware OS vulnerabilities including critical BOVPN Over TLS code injection CVE-2026-86131 and pre-auth fingerd overflow CVE-2026-81433 on Firebox appliances

WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE

Do Son September 30, 2026

TL;DR WatchGuard disclosed 14 Fireware OS vulnerabilities on September 29, 2026, affecting its Firebox firewalls. The worst,...