Cyber
PHP2Shell security flaws now successfully exploited in the wild
Two critical RCE vulnerabilities tracked as PHP2Shell are now being actively exploited by threat actors in real-world attacks.
Tag
#RCE
The latest news, analysis and stories about RCE — TECC.UZ.
14 articles
Cyber
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Security researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, closing a major security flaw.
Cyber
HPE Patches Critical RCE and Auth Bypass Flaws in ArubaOS
HPE has rolled out security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity remote code execution and auth bypass flaws.
IT
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released urgent patches addressing critical remote code execution vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.
Cyber
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges IT administrators to immediately patch critical RCE vulnerabilities affecting NetScaler ADC and Gateway appliances.
Cyber
Rejetto HFS Servers Actively Scanned for Critical RCE Flaw
According to BleepingComputer, hackers are actively scanning the web for the CVE-2026-61500 vulnerability in Rejetto HFS, which leads to account takeover and RCE.
AI
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab has urged customers to immediately patch a critical AI Gateway vulnerability that could allow attackers to execute arbitrary commands on vulnerable instances.
Cyber
F5 Patches Critical BIG-IP APM Zero-Day Flaw Exploited in RCE Attacks
F5 has released urgent security updates to address a critical BIG-IP APM zero-day vulnerability actively exploited in remote code execution attacks.
Cyber
Actively exploited sandbox RCE vulnerability found in all Chromium versions
A critical remote code execution flaw bypassing the sandbox has been discovered across all versions of Chromium and is actively exploited in the wild.
Cyber
Over 8,300 Gitea servers vulnerable to code execution attacks
According to Shadowserver, over 8,300 internet-exposed Gitea instances remain unpatched against critical remote code execution flaws.
Cyber
CISA orders federal agencies to patch critical Citrix NetScaler flaw
The US cybersecurity agency has instructed federal civilian agencies to fix an actively exploited remote code execution vulnerability in Citrix devices by Saturday.
IT
Critical Avada WordPress Theme Flaw Enables Zero-Click RCE
A critical vulnerability chain in the popular Avada WordPress theme allows unauthenticated attackers to execute arbitrary code on servers.
Cyber
Critical Zimbra RCE Flaw Actively Exploited in Recent Attacks
CERT Polska has issued a warning as attackers begin actively exploiting a critical remote code execution vulnerability in the Zimbra Collaboration Suite.
Cyber
Critical RCE flaw in Windows IKE Extension now actively exploited
CISA has warned that hackers are actively exploiting a critical remote code execution flaw in the Windows Internet Key Exchange service.