13561 matches found
CVE-2026-73222 Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...
CVE-2026-73212 coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCE
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...
CVE-2026-73212
Coturn (TURN/STUN server) vulnerability CVE-2026-73212: The function good_peer_addr() in src/server/ns_turn_server.c fails to canonicalize IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms via ioa_addr_in_range() in src/client/ns_turn_ioaddr.c. This can let an authenticated RFC 6062 TCP...
CVE-2026-66808
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-62817
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-59124
Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68812
CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...
CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2026-56750
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-66807
CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
...