#rce


Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Oct 15, 2026 // 23:36

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. […]

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Oct 15, 2026 // 12:37

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. The […]

Citrix warns admins to patch new NetScaler RCE flaw immediately

Oct 9, 2026 // 11:37

Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access […]

Rejetto HFS servers now actively scanned for critical RCE flaw

Oct 6, 2026 // 12:57

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution […]

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Oct 5, 2026 // 12:35

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS […]

GitLab warns of critical RCE vulnerability in AI Gateway service

Oct 2, 2026 // 23:17

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. AI Gateway is […]

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Oct 1, 2026 // 19:50

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system […]

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Sep 30, 2026 // 18:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution […]

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Sep 28, 2026 // 00:16

Update: Article rewritten with official confirmation from Citrix. Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are […]

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Sep 27, 2026 // 12:28

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, […]

1 2 3 … 16 Next