code execution news
3 stories
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL has released updates to address a critical security vulnerability, identified as CVE-2026-6471, which has reportedly been present in the database system for 12 years. The flaw allows a user who possesses replication privileges to execute arbitrary code on the database server. This is achieved by loading a specially crafted malicious library, leveraging a mechanism within the logical…
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
A security researcher has demonstrated a method to trick Anthropic's Claude Code, specifically the Opus 5 model running in Auto Mode, into executing arbitrary code by simply asking it to summarize a malicious website. The attack, detailed by Johann Rehberger, also known as wunderwuzzi, reportedly has a success rate of up to 80 percent.
WordPress Core Flaw Allows Unauthenticated Code Execution
A critical vulnerability has been reported in the core of WordPress, enabling unauthenticated attackers to achieve arbitrary code execution on affected websites. The flaw, identified by Adam Kues of Searchlight Cyber, was present in WordPress versions 6.9 and 7.0. WordPress has subsequently released patches and initiated forced updates to mitigate the risk across its user base.