📄 Cisco CUCM 15.x Remote Code Execution

A pre-authentication remote code execution chain in Cisco CUCM 15.x allows an unauthenticated network attacker to achieve root-level access in three HTTP requests. Advisory Information - Advisory IDs: SKYLINE-2026-001, SKYLINE-2026-002, SKYLINE-2026-003 - Title: Pre-Authentication Remote Root via...

Arbitrary code execution (RCE) @babel/traverse dependency in Jira Software Data Center

This is a vulnerability in a non-Atlassian Jira Software Data Cente dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This vulnerability affects certain versions of Atlassian Jira Software Data Center. The @babel/traverse dependency is affected b...

RCE (Remote Code Execution) @babel/plugin-transform-modules-systemjs Dependency in Jira Software Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.17.2, 10.0.0, 10.1.1, 10.3.20, and 11.3.8 of Jira Software Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H...

File Inclusion rollup Dependency in Jira Software Data Center

This High severity File Inclusion vulnerability was introduced in versions 9.17.5 and 11.3.8 of Jira Software Data Center. This File Inclusion vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E: P allows an unauthenticate...

CVE-2026-43631 llama.cpp b7492–b9060 Use-After-Free RCE via llama-server

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

CVE-2026-66066-POC — Updated!

PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...

Exploit for CVE-2026-69098

CVE-2026-69098 — kotaemon unauthenticated deserialization RCE...

CVE-2026-65548: Improper Control of Generation of Code

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...

CVE-2026-66909: Deserialization of Untrusted Data

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

PT-2026-68656

Name of the Vulnerable Software and Affected Versions WGDashboard versions prior to 4.2.4 Description An OS command injection issue allows authenticated attackers to execute arbitrary commands with root privileges on the system. This leads to Remote Code Execution RCE, which is the ability of an...

PT-2026-75962

The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE in a manner similar to previously disclosed vulnerabilities. The Twig sandbox in Craft CMS works by implementing Twig's SecurityPolicyInterface. The resultin...

CVE-2026-65553: Improper Control of Generation of Code

Unauthenticated Remote Code Execution RCE in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +23 more potentially affected by CVE-2026-71314 via nuxt (>=4.0.0-rc.0, <=4.5.0)

nuxt NPM version =4.0.0-rc.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =10.0.2-rc.5, =1.1.11, =1.0.4, =1.6.0-rc.3, =0.4.5, =0.0.0, =1.1.0, =0.1.0, =0.2.0 - @zach-mac/zachscommoncomponents 1.0.4 and more Source cves: CVE-2026-71314 Source advisory: OSV:GHSA-HXCR-HM88-MPQ6...

CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field — Updated!

Security Advisory: Camaleon CMS - Authenticated RCE via selecteval Custom Field Assigned CVE ID: CVE-2026-66748 Product: Camaleon CMS https://github.com/owen2345/camaleon-cms Affected versions: 2.1.1 – 2.9.1 introduced commit 415cbda6 2015-10-16; fixed commit 15882366 2026-03-29 / v2.9.2 Severity...

CVE-2026-9201: Inadequate Encryption Strength

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

PT-2026-67969

Name of the Vulnerable Software and Affected Versions zportals WordPress plugin versions prior to 6.3.4 Description The plugin fails to properly validate uploaded files by trusting the client-supplied content type and preserving the original file extension. This allows any authenticated user with...

PT-2026-68098

Name of the Vulnerable Software and Affected Versions MacCMS10 affected versions not specified Description The admin template editor in application/admin/controller/Template.php uses a blacklist regex to block dangerous PHP functions in template content. However, the blacklist fails to include...

CVE-2026-71232: Improper Control of Generation of Code

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations...

VulnCheck KEV: CVE-2026-63077

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol...