remote code execution news
10 stories
PaperCut releases second emergency patch for exploited flaws
PaperCut has issued a second emergency security update for its NG and MF print management software, addressing two actively exploited vulnerabilities after researchers identified multiple methods to bypass the initial fixes. The company had previously released an emergency patch for PaperCut NG/MF versions 25 and 26, warning of zero-day exploitation, but initially withheld technical details…
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Zimbra Collaboration Suite (ZCS), identified as CVE-2026-73570, to its Known Exploited Vulnerabilities (KEV) catalog. This move mandates that all U.S. federal civilian executive branch (FCEB) agencies address the flaw by August 24, 2026, to protect their networks, and private organizations…
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Attackers are reportedly exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS) that enables unauthenticated remote code execution. The flaw, tracked as CVE-2026-73570 and assigned a CVSS score of 8.9, is attributed to insufficient input sanitization within the Simple Network Management Protocol (SNMP) notification processing component of ZCS.
Hackers Exploiting Unpatched GeoServer Zero-Day
Reports indicate that a critical zero-day vulnerability in GeoServer is currently being actively exploited by threat actors. The flaw, identified as a SQL injection vulnerability, has the potential to allow attackers to achieve remote code execution (RCE) on systems running vulnerable versions of the software.
Cisco Identity Services Engine Vulnerable to RCE via Directory Traversal
Cisco has released a security update for its Identity Services Engine (ISE) to address a critical remote code execution (RCE) vulnerability, identified as CVE-2026-20181. The flaw, which carries a CVSS score of 7.2, stems from a directory traversal vulnerability within the `zipFiles` method of the software.
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
A critical remote code execution vulnerability has been reported in the NGINX HTTP WebDAV module. The flaw, identified as ZDI-26-578, is described as an integer underflow that arises from insufficient validation of user-supplied data during the parsing of WebDAV requests. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.
Cisco Identity Services Engine Vulnerable to Command Injection
A critical command injection vulnerability has been reported in Cisco Identity Services Engine (ISE), potentially allowing remote attackers to execute arbitrary code. While the flaw is severe, successful exploitation requires prior authentication to the system. The vulnerability has been assigned a CVSS score of 7.2, indicating a high level of concern despite the authentication prerequisite.
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
A critical vulnerability, tracked as CVE-2026-42533, has been reported in NGINX, a widely used web server and reverse proxy. This flaw is said to potentially enable remote attackers to crash worker processes and may, in certain configurations, lead to remote code execution. The vulnerability affects a broad range of NGINX versions, specifically from 0.9.6 up to 1.31.2.
Two High-Severity WordPress Vulnerabilities Require Immediate Patching
WordPress has released emergency security updates to address two high-severity vulnerabilities, including a critical SQL injection flaw that could lead to remote code execution. Users are urged to patch their installations immediately.
Bug in top AI coding agents shows that Unix-era security headaches never really die
Security researchers have identified a significant vulnerability, termed "GhostApproval," affecting multiple widely-used AI coding assistants. This flaw allows malicious actors to trick these agents into accessing and modifying files beyond their intended sandbox environment, leading to potential remote code execution on a developer's machine. The vulnerability was discovered by Google-owned…