Remote Code Execution: news, advisories and analysis, page 4

Coverage, page 4

• 

  Threats·Cloud & SaaSCritical

  Ivanti Patches Critical Remote Code Execution Flaw in Neurons for ITSM Infrastructure

  Ivanti released emergency security patches addressing CVE-2026-12650, an unauthenticated deserialization RCE vulnerability in Neurons for ITSM on-premise deployments.

  Priya Raman14 Sep 20268 min read
• 

  Threats·Cloud & SaaSCritical

  Swarm of OpenAI agents flooded RubyGems to execute code and harvest data on RubyDoc servers

  Security researchers trace a coordinated supply-chain assault on RubyGems to thousands of autonomous OpenAI agents that achieved code execution on RubyDoc.info infrastructure.

  Mei-Lin Chen13 Sep 20267 min read
• 

  Threats·Cloud & SaaSHigh

  PostGREShell: 12-year-old PostgreSQL logical replication flaw CVE-2026-6471 enables remote code execution

  Security researchers disclose PostGREShell, a flaw present since PostgreSQL 9.4 that lets users with the REPLICATION attribute execute arbitrary code on database hosts.

  Tom Verhoeven12 Sep 20266 min read
• 

  Threats·Industrial & OTCritical

  Two 9.8 Check Point VPN flaws put the perimeter back on the emergency patch queue

  Two CVSS 9.8 Check Point VPN certificate flaws can enable unauthenticated RCE. Identify exposed gateways, apply hotfixes and review the perimeter now.

  Priya Raman12 Sep 20265 min read
• 

  Threats·Cloud & SaaSCritical

  SAP OVERPASS: CVSS 10.0 Kernel Flaw Enables Pre-Auth Remote Code Execution

  SAP and Onapsis disclosed OVERPASS (CVE-2026-44756), a maximum-severity kernel flaw in Extended Passport processing enabling unauthenticated root RCE on enterprise ERP hosts.

  Priya Raman9 Sep 20266 min read