Technology ❯ Cybersecurity ❯ Software Vulnerabilities

Remote Code Execution

Veeam Backup and Replication CVE-2026-20131 CVE-2025-43300 CVE-2026-1731 Hewlett Packard Enterprise CVE-2026-20160 FreeScout Vulnerability CVE-2026-28289 CVE-2026-22679 WordPress Vulnerabilities CVE-2025-26399 FreeScout CVE-2026-28289 Microsoft Products CVE-2025-53770 CVE-2026-28446 Grist-Core SAP NetWeaver CVE-2026-20841 SolarWinds Web Help Desk

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Public proof-of-concept code and reports of live attacks have raised urgent risk for unpatched WordPress sites.

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

BeyondTrust Patches Critical Pre-Auth RCE in Remote Access Tools

HPE Urges Immediate Patching for OneView CVE-2025-37164, a CVSS 10 Unauthenticated RCE

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass