Technology ❯ Cybersecurity ❯ Threats

Remote Code Execution

Exploitation Techniques Exploits Denial of Service Critical Vulnerabilities Zero-Day Exploits Authentication Bypass Buffer Overflow NGINX Vulnerability CVE-2026-21992 Ivanti Sentry

Critical F5 BIG-IP APM Flaw Enables Unauthenticated Remote Code Execution

CISA has ordered rapid remediation for federal systems following F5's release of hotfixes and mitigations.

WordPress Patch Fixes Critical Unauthenticated File‑Inclusion Flaw

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

GeoServer Zero-Day SQL Injection Draws Mass Probes

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Microsoft Fixes Nearly 400 Flaws in August Patch Day

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Microsoft Issues Record Patch Day While Unpatched Defender Zero‑Day Raises Alarm

Google Rolls Out Chrome 148 to Fix 79 Flaws, Including 14 Critical

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

Microsoft’s May Patch Tuesday Fixes About 137 Flaws With No Zero-Days

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

Oracle Issues Emergency Patch for Critical RCE in Identity Manager and Web Services Manager

Claude Code Flaws Enabled RCE and API Key Theft via Malicious Repo Configs