CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform
Critical unauthenticated RCE vulnerability CVE-2026-6875 hits ServiceNow via a GlideRecord sandbox escape. Attackers are already exploiting unpatched instances.
Tag
Remote Code Execution
16 articles
WP2Shell: WordPress Core SQLi + REST API Chain to Pre-Auth RCE
WP2Shell chains CVE-2026-60137 and CVE-2026-63030 for unauthenticated RCE on WordPress Core. Patch to 6.8.6, 6.9.5, or 7.0.2 now,…
CVE-2026-48282: ColdFusion RDS Vulnerability Actively Exploited
CVE-2026-48282 is a critical ColdFusion RDS path traversal vulnerability under active exploitation. Learn the risks, IOCs, and how…
CVE-2026-33017: Langflow RCE Deploys Monero Miners on AI Servers
Langflow CVE-2026-33017 is under active exploitation. Attackers deploy Monero miners via unauthenticated RCE. Get IOCs, patch steps, and…
CVE-2026-42271: Unauthenticated RCE in LiteLLM AI Gateway
CVE-2026-42271 enables unauthenticated RCE in LiteLLM when chained with CVE-2026-48710. Learn wha is at risk and how to…
CVE-2026-35273: Active Exploitation of Oracle PeopleSoft Zero-Day Vulnerability
Oracle has disclosed CVE-2026-35273, a critical vulnerability in PeopleSoft Enterprise PeopleTools that has already been exploited by threat…
CVE-2025-3248: Critical Langflow Unauthenticated Remote Code Execution Vulnerability
Critical Langflow vulnerability CVE-2025-3248 allows unauthenticated remote code execution, enabling attackers to fully compromise vulnerable servers.
CVE-2025-24813 – Apache Tomcat Vulnerability Under Active Exploitation
CVE-2025-24813, an Apache Tomcat RCE flaw, is under active attack. PoC exploit availability boosts risks, enabling threat actors…
CVE-2024-9264 – Grafana’s SQL Expressions Vulnerability
A critical vulnerability (CVE-2024-9264) in Grafana allows remote code execution, risking system commands and sensitive file access. Immediate…
RCE Zero Day Vulnerabilities in CUPS Put Linux Systems at Risk
CUPS RCE Vulnerabilities (CVE-2024-47076, CVE-2024-47177, CVE-2024-47175, CVE-2024-47176) put systems at risk of remote attacks through malicious printers.
CVE-2024-8190 – OS Command Injection in Ivanti CSA
Learn about CVE-2024-8190, an OS command injection vulnerability in Ivanti CSA. Discover how it allows remote code execution…
CVE-2024-8517 – Unauthenticated Remote Code Execution in SPIP
A command injection flaw (CVE-2024-27348) in SPIP allows remote attacks without authentication. Learn mitigation steps & how AppTrana…