1,062 articles
Threat IntelCVE-2026-127080 in OpsTree BuildPiper (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.7.0 and later.
Threat IntelCVE-2026-127073 in OpsTree BuildPiper (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.7.0 and later.
GoogleCVE-2026-93327 in Google Cloud Enterprise Services (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026-09 an
CMS SecurityCVE-2026-126173 in The AutomatorWP Pro plugin for WordPress' webhook (Missing Authorization) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-126952 in Zipline (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.4.0 and later.
Threat IntelCVE-2026-127079 in OpsTree BuildPiper (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.7.0 and later.
Threat IntelCVE-2026-128014 in FrankenPHP standalone static binaries (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.1
KubernetesCVE-2026-128027 in FrankenPHP Docker images (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.1.11 and later
Threat IntelCVE-2026-128049 in OpenMage Magento LTS (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 20.18.2 and later.
Threat IntelCVE-2026-128047 in OpenMage magento-lts (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 20.18.2 and later.
Threat IntelCVE-2026-128333 in Listmonk (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 7.0.0-beta.2 and later.
Threat IntelCVE-2026-109445 in PLANET GS-5220-8P2T2S (hardware version (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 3
Threat IntelCVE-2026-124415 in Improper Neutralization of Special Elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-125851 in Unrestricted Upload of File with Dangerous Type vu (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch
Threat IntelCVE-2026-129125 in C-Kermit (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 11.1.515 and later.
Threat IntelCVE-2026-129110 in SysPass (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.2.11 and later.
Threat IntelCVE-2026-125855 in Elextensions Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code exec
Threat IntelCVE-2026-103813 in Dell PowerStore (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release
Threat IntelCVE-2026-63079 in RBH Access Technologies Integra32 Security Managem (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-95614 in Zenitel The host configuration watcher in Zenitel Connect (Input Validation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-129126 in C-Kermit (Out-of-Bounds Write) allows remote attackers to trigger arbitrary code execution. Patch: Version 11.1.515 and later.
Threat IntelCVE-2026-129124 in C-Kermit (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 11.1.515 and later.
Threat IntelCVE-2026-95377 in OS command injection in the TFTP provisioning modu (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Threat IntelCVE-2026-123965 in A Prompt injection vulnerability in all versions of (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc