Vulnerabilities
Defend Windows LSASS from CVE-2026-96219: Critical Unauthenticated RCE Flaw Demands Immediate Action
An unauthenticated out-of-bounds write flaw in Windows LSASS allows remote attackers to execute code, rated critical by the NVD.
Remote Code Execution
Everything Malware Chronicle has reported about Remote Code Execution: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
IBM i 7.3-7.6 Users Must Patch HTTP Server Admin to Block Critical RCE CVE-2026-96119
IBM i versions 7.3 through 7.6 contain a critical vulnerability in the HTTP Server Administration web application that allows remote authenticated attackers to execute arbitrary code.
Vulnerabilities
GitLab Self-Managed Admins Must Upgrade Immediately to Fix Critical CI/CD Regex RCE Vulnerability
GitLab issues urgent fixes for a maximum-severity flaw in its CI/CD regex compiler that allows attackers to run code without logging in.
Vulnerabilities
Update AnyDesk Linux to 8.0.3 to Stop Remote Root Compromise
A heap buffer overflow in AnyDesk 8.0.2 allows attackers to execute commands with root privileges before user approval. Version 8.0.3 patches the flaw.
Vulnerabilities
Update WooCommerce 3D Configurator to 2.16.3 to Fix Critical No-Auth RCE in CVE-2026-103889
A flaw in the 3D Product Configurator for WooCommerce allows attackers to execute code on servers without logging in or providing credentials.
Vulnerabilities
Mitigate Strapi Admin Data Leak and RCE Chain Before Federal Deadline
CISA adds CVE-2023-22894 to its exploited vulnerabilities catalog, urging developers to mitigate the flaw before the federal deadline.