Everything Patch Observer has reported about Remote Code Execution: 17 stories, newest first. Part of our Vulnerabilities coverage.
Stack-based buffer overflows in the Totolink X2000R allow remote code execution via crafted HTTP requests, posing a severe risk to managed networks.
A new vulnerability allows remote attackers to execute code on FortiSIEM systems without credentials, exploiting a path traversal issue in an exposed service.
A critical flaw in DB-GPT versions up to 0.8.2 allows attackers to execute arbitrary code as root without credentials, posing an immediate risk to exposed instances.
A severe vulnerability in Eptura Archibus permits attackers to upload executable files and run commands on servers without logging in.
A high-severity stack buffer overflow in IBM MQ allows remote attackers to execute code when processing malformed TLS certificates during channel setup.
Threat actors are actively exploiting a command injection flaw in the built-in Collabora Online CODE Server app, allowing full system control without authentication.
F5 released NGINX versions 1.30.6 and 1.31.7 on October 14 to address five vulnerabilities, including critical memory bugs and a TLS session forgery issue.
A critical vulnerability in Report One MyReport Updater through version 2.1.1 allows unauthenticated remote code execution. No patch is confirmed yet.
An update for Stirling-PDF version 2.13.2 addresses a critical vulnerability that lets authenticated admins execute arbitrary commands via database imports.
Microsoft SQL Server versions through 2022 face a high-severity flaw that allows authorized attackers to execute code over the network.
A use-after-free vulnerability in Microsoft Windows DHCP Server allows network-based remote code execution, demanding immediate attention from infrastructure teams.
All versions of the WordPress AGE-GATE plugin through 1.0 contain a critical flaw that lets attackers run code on servers without logging in.
Unauthenticated remote code execution in Xorbits Xoscar through 0.11.2 poses immediate risk to exposed TCP channels and privileged servers.
A critical authorization flaw in Adobe ColdFusion allows low-privileged attackers to run arbitrary code without user interaction. The NVD record lists affected versions.
A critical memory corruption flaw in Dragonfly DB versions prior to 1.40 allows unauthenticated attackers to execute code, with no vendor patch currently available.
Patchstack confirms active wild exploitation of CVE-2026-85097 in Bricksforge versions up to 3.1.8.9, requiring immediate updates.
A critical deserialization flaw in Microsoft Dataverse allows network-based code execution, posing severe risks to managed service providers.