Tag

remote code execution

21 stories

Chrome zero-day patch reaches Stable and Extended Stable users

Google has fixed a Chrome zero-day that attackers were already using. The flaw is tracked as CVE-2026-125350, and it allows a remote attacker to run malicious code in the browser. The same patch also reaches enterprise users through the Extended Stable channel. Google Chrome Stable update closes exploited XML flaw Google’s Stable channel update moves Chrome to version 157.0.8103.50/.51 for Windows and Mac and 157.0.8103.50 for Linux. The rollout will…

Saugata DattaNov 10, 20263 min read46

Data Breach

ForgeRock identity systems gave researchers remote car access

Researchers found that a vulnerability chain in ForgeRock identity systems let them run code on two automakers’ production servers and unlock connected cars remotely. The work was part of controlled security research, not a criminal campaign, and the issue was fixed within about two hours after both unnamed automakers received the report. ForgeRock attack chain in production systems The investigation started with the Android apps used by vehicle owners. Both…

Saugata DattaNov 10, 20262 min read44

Data Breach

ModSecurity flaws let uploads bypass checks and may trigger code execution

Two high-severity flaws have been disclosed in ModSecurity, the open-source web application firewall used with Apache, IIS, and Nginx. One issue can let malicious uploads pass filename checks, and the other can crash a worker process in a way that could lead to remote code execution. What the upload flaw allows CVE-2026-104269, also listed as GHSA-5pww-8rfg-9crf, affects ModSecurity 3.0.0 and later. It allows unauthenticated network attacks that bypass file checks…

Saugata DattaNov 9, 20263 min read56

Cybersecurity

React Server Components flaw prompts immediate patching

A React Server Components security flaw can let attackers run code remotely without logging in. React published the advisory, tracked as GHSA-xqc2-xf4c-x3h3, on October 14, 2026, and the issue carries a CVSS v4 score of 9.5. Affected packages and releases The flaw affects react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. These packages provide React Server Components support across different build tools. The advisory says exploitation depends on an extremely rare response pattern that…

Saugata DattaNov 9, 20262 min read60

Cloud Computing

Google patches an Android flaw that can run code without user action

A critical Android flaw could let an attacker run code on a phone remotely without any user action, according to Google’s November security bulletin. The flaw is CVE-2026-58868, and Google says it affects Android 14 through 17. Security patch level 2026-11-01 or later includes the fix for CVE-2026-58868. Phone makers and carriers deliver that update on their own schedules, and Google says older versions such as Android 12 and 13…

Saugata DattaNov 4, 20264 min read106

Cybersecurity

Anthropic Exploit Reveals Critical Linux Kernel Flaw (CVE-2026-98432) That Grants Remote Root on MPTCP Servers

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability—tracked as CVE-2026-98432—that can allow unauthenticated attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw is a use-after-free in the kernel's IPv4 TCP networking code and has been scored 9.8/10 by the Linux kernel CVE team, although some vendors assess exploitation complexity differently. What the flaw is CVE-2026-98432 stems from a…

Saugata DattaOct 31, 20263 min read184

Cybersecurity

Active exploitation of critical GitLab regex flaw forces urgent patching

Attackers have begun exploiting a maximum-severity vulnerability in GitLab that can allow remote code execution, prompting immediate warnings from GitLab and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-97229, stems from an integer overflow in GitLab's CI/CD Regular Expression Compiler and can be triggered by a malicious regular expression in a pipeline configuration. The flaw at a glance CVE-2026-97229 is an integer overflow weakness in…

Saugata DattaOct 30, 20262 min read184

Cybersecurity

Seven Critical Firebox Flaws in WatchGuard Fireware Could Allow Remote Code Execution

WatchGuard disclosed a set of serious vulnerabilities in Fireware OS on October 27, 2026, revealing seven critical defects that, in some cases, allow remote code execution or root-level actions without prior authentication. The advisory is part of a broader release covering 18 security issues across Fireware OS and the Windows Mobile VPN with SSL client, with the seven critical entries carrying CVSS scores between 9.1 and 9.5. Where noted, attackers…

Saugata DattaOct 29, 20263 min read212

Cybersecurity

WordPress 7.1.4: Urgent Patch Fixes 22 Flaws, Including an Unauthenticated Update-Time RCE

WordPress pushed out version 7.1.4 on October 28, 2026, closing 22 security flaws and urging site owners to update immediately. The release addresses a range of issues from an unauthenticated remote code execution risk in the update process to multiple stored cross-site scripting and access-control problems. With fixes spanning recent and older branches, the update is a reminder that timely patching remains critical for every WordPress site. The unauthenticated update-time…

Saugata DattaOct 29, 20264 min read200

Cybersecurity

Cisco Expressway Flaw Lets Remote Attackers Run Commands as Root

Cisco has released fixes for a critical vulnerability in its Expressway product line that could allow remote attackers to execute operating-system commands with root privileges on affected devices. Tracked as CVE-2026-76466 and assigned a CVSS score of 9.8, the issue is specific to clustered deployments of Cisco Expressway Core (Expressway‑C) and Cisco Expressway Edge (Expressway‑E). Cisco published its advisory on October 21, 2026, and the company credited Stefan Aleksic of…

Saugata DattaOct 23, 20264 min read292

Cybersecurity

Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel

Several unpatched Linux vulnerabilities were unintentionally posted to public mailing lists in October, exposing technical details before fixes reached production kernels. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), included two critical flaws—each rated CVSS 9.0—that affect the kernel’s built-in KSMBD SMB file server and could enable remote code execution depending on configuration. Other reports described local privilege-escalation and information-disclosure risks across different kernel subsystems and related software.…

Saugata DattaOct 23, 20264 min read304

Automation

Critical GitLab AI Gateway Flaw: What Administrators Need to Do Now

GitLab has pushed an urgent set of security updates after disclosing a critical vulnerability in its AI Gateway that could allow authenticated users to run arbitrary commands on the gateway. Tracked as CVE-2026-90970 and rated CVSS 9.9, the flaw affects self-hosted AI Gateway deployments that support GitLab Duo AI features. While GitLab’s hosted gateways have already been patched, organizations running their own gateways must act immediately to mitigate a high-impact…

Saugata DattaOct 3, 20264 min read414

Free Tools: IP, DNS, SSL