Technology ❯ Cybersecurity ❯ Vulnerabilities

Remote Code Execution

Security Patches VMware vCenter Server CVE-2025-21043 CVE-2025-10035 Mitigation Measures CUPS Vulnerabilities CVE-2025-50176 Authentication Bypass HPE Aruba Networking Zimbra Mail Servers

Microsoft Issues Out-of-Band Fix for Critical WSUS RCE as Attacks Emerge

Abuse reports following a public exploit prompted cumulative patches that require a reboot.

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

Microsoft’s October Patch Tuesday Fixes 175 Flaws as CISA Orders Rapid Patching of Exploited Zero‑Days

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

RediShell: Critical Redis RCE Triggers Urgent Updates With 60,000 Servers Unauthenticated

CERT Confirms Critical RCE in DrayTek Vigor Routers as Updates Land

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass

CISA Details 2024 Federal Agency Breach Exploited via GeoServer RCE

Samsung Releases Patch for Actively Exploited Android Zero‑Day CVE-2025-21043

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits

CISA Orders Immediate Fix for Actively Exploited Sitecore ViewState Flaw (CVE-2025-53690)

Samsung Begins Rolling Out September 2025 Security Patch With 25 Extra Galaxy Fixes

Citrix NetScaler Zero‑Day Triggers Emergency Patching as Thousands of Devices Remain Exposed

Commvault Patches Four Flaws That Enable Pre‑Auth RCE Chains in On‑Prem Backup Suite

Attackers Exploit ActiveMQ Flaw, Deploy DripDropper, Then Patch the Hole

Cisco Urges Customers to Patch Critical RADIUS Flaw in Firewall Management Center

Microsoft Delivers August Patch Tuesday With Over 100 Fixes Including Kerberos Zero-Day

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days

Google Rolls Out August Android Security Update With Critical Remote Code Execution Patch