F5 patches CVE-2026-42533, a regex map heap overflow that crashes nginx workers and may allow RCE in specific configurations.

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and ...

Millions of websites worldwide, including in Australia, are likely vulnerable to a newly revealed pre-authentication RCE.

Multiple Juniper Junos OS security vulnerabilities expose networks to remote code execution, DoS, and data theft, urging ...

Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.

GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private repository to run arbitrary commands on the platform’s own servers. The flaw, ...

A critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support and Privileged Remote Access appliances is now being exploited in attacks after a PoC was published ...

Security vulnerabilities in the self-hosting platform offer attack possibilities with low, albeit narrowly defined, access ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks. Organizations using vulnerable versions of the Hugging ...

A newly disclosed security vulnerability affecting 7-Zip has prompted security researchers to recommend that users update the ...