CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611

InstantCMS , a free and open-source content management system, contains a Remote Code Execution vulnerability in its component installer in versions prior to 2.18.2 . A remote authenticated attacker can upload a malicious component; although the component is not formally installed, the uploaded P...

EUVD-2026-73561

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

EUVD-2026-73542

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

EUVD-2026-73504

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...

CVE-2026-69434

A heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a malicious URL) but no prior authentication or privileges, per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/...

EUVD-2026-73496

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

EUVD-2026-73483

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69386

CVE-2026-69386 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) , with a network attack vector, low complexity, no privileges require...

EUVD-2026-73475

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...

EUVD-2026-73423

Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73389

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73364

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...

EUVD-2026-73346

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

EUVD-2026-73342

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...