Everything Honeypot Daily has reported about Remote Code Execution: 13 stories, newest first. Part of our Vulnerabilities coverage.
PHP teams face an out-of-cycle release for two 9.2-rated vulnerabilities, though technical details and affected versions remain unconfirmed by the vendor.
A critical buffer overflow in specific Totolink firmware allows authenticated attackers to execute arbitrary code via HTTP requests, posing a risk to exposed management interfaces.
Emergency patches for two critical remote code execution flaws in PHP are due tomorrow after details leaked early.
A critical flaw in Cognition versions prior to 0.13.0 permits unauthenticated attackers to execute arbitrary code via exposed API endpoints without credentials.
A high-severity injection flaw in Apache Camel’s dynamic router lets attackers run arbitrary code via message headers or bodies.
Microsoft confirms a high-severity remote code execution flaw in Visio, affecting LTSC and Microsoft 365 users who have not applied recent security updates.
Microsoft has disclosed CVE-2026-96924, a critical flaw in Windows OLE that permits unauthorised network-based code execution via untrusted pointer dereference.
Microsoft has disclosed a critical remote code execution vulnerability in the Windows CCFFilter Driver, identified as CVE-2026-83780, affecting Windows systems.
A critical heap overflow in Windows Shell allows remote code execution, requiring defenders to monitor network traffic and shell processes closely.
A critical authorisation flaw in Adobe Experience Manager allows arbitrary code execution without user interaction, affecting multiple versions.
An unpatched use-after-free error in Microsoft QUIC allows network-based remote code execution on multiple Windows 11 versions.
Researcher Simon Koeck found that exposed OAuth secrets acted as signing keys, allowing session forgery and remote code execution on several platforms.
A high-severity flaw in Apache Camel Karavan lets authenticated users write files outside project directories, enabling remote code execution via Git commits.