Curated security research, vulnerabilities, advisories and tools for practitioners.

#rce

Security coverage tagged rce.

1.

CVE-2026-111497: Unauthenticated WordPress RCE Exploit Chain PoC via Brotli Decoder Flaw

vulnerability | Critical | 2026-10-28 22:42 | CVE-2026-111497 | github.com | Original ↗ | .md | #rce | #wordpress | #red-team

2.

CVE-2026-106378: Chrome GPU Sandbox Escape to RCE

vulnerability | 2026-10-30 18:14 | CVE-2026-106378 | pwn.ai | Original ↗ | .md | #rce

3.

php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP

vulnerability | Critical | 2026-10-24 05:43 | github.com | Original ↗ | .md | #rce | #zero-day | #github

4.

php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations

research | Actively exploited | 2026-10-22 10:36 | CVE-2026-109618 | github.com | Original ↗ | .md | #active-exploitation | #rce | #github

5.

open62541: Integer Overflow → Heap Overflow → RCE.

vulnerability | 2026-10-24 00:00 | CVE-2026-116014 | bugpwn.com | Original ↗ | .md | #rce | #vulnerability | #cve

6.

Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis

research | 2026-10-25 21:48 | github.com | Original ↗ | .md | #bug-bounty | #rce | #web3

7.

How to patch PHP2Shell with free Aikido Images

blog | 2026-10-26 00:00 | aikido.dev | Original ↗ | .md | #rce | #php | #authentication

8.

Hunting Leaked PHP2Shell RCE Across Open Directories (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-22 00:00 | hunt.io | Original ↗ | .md | #rce | #php | #cve

9.

PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-22 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #rce | #php

10.

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet

vulnerability | 2026-10-21 13:59 | wiz.io | Original ↗ | .md | #ai-security | #rce | #php

11.

What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

vulnerability | 2026-10-21 00:00 | aikido.dev | Original ↗ | .md | #rce | #php | #vulnerability

12.

PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619

vulnerability | 2026-10-21 00:00 | netspi.com | Original ↗ | .md | #rce | #php | #pre-auth

13.

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

vulnerability | 2026-10-20 12:34 | CVE-2026-106173 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #path-traversal

14.

Assetnote Releases php2shell-scanner: High-Fidelity Scanner for CVE-2026-109618 & CVE-2026-109619

tool | 2026-10-22 03:53 | github.com | Original ↗ | .md | #rce | #github | #php

15.

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

research | 2026-10-21 00:00 | crowdstrike.com | Original ↗ | .md | #rce | #vulnerability-research | #php

16.

[CVE-2026-105133] AhsayCBS Deep-Dive: Auth Bypass to RCE

vulnerability | 2026-10-14 16:47 | CVE-2026-105133 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #path-traversal

17.

MyReport Updater: From gRPC to SYSTEM

vulnerability | 2026-10-12 22:00 | CVE-2026-110632 | blog.quarkslab.com | Original ↗ | .md | #rce | #supply-chain | #git

18.

[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days

vulnerability | 2026-10-13 15:32 | CVE-2026-104935 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

19.

gVisor Sandbox Escape PoC: Host Root RCE via directfs openHandle Type Confusion

vulnerability | Critical | 2026-10-10 01:06 | github.com | Original ↗ | .md | #cloud | #rce | #zero-day

20.

More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE

research | 2026-10-15 00:00 | slcyber.io | Original ↗ | .md | #cloud | #rce | #vulnerability-research

21.

Inside a PaperCut Attacker’s AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries

tool | 2026-10-15 00:00 | hunt.io | Original ↗ | .md | #ai-security | #rce | #exploitation

22.

More, Better, Faster: How we automate Metabase releases

blog | 2026-10-12 09:09 | metabase.com | Original ↗ | .md | #rce | #supply-chain | #ci-cd

23.

CVE-2025-54769: Authenticated LPAR2RRD Upgrade Remote Code Execution PoC

vulnerability | High | 2026-10-05 12:03 | CVE-2025-54769 | github.com | Original ↗ | .md | #rce | #red-team | #poc

24.

Zammad CVE-2026-102489: Session Leak to RCE

vulnerability | 2026-10-07 10:00 | CVE-2026-102489 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #zammad

25.

go2shell: Rooting Home Assistant through SSDP

research | 2026-10-07 22:05 | mccaulay.co.uk | Original ↗ | .md | #rce | #vulnerability-research | #privilege-escalation

26.

Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine

research | 2026-10-07 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #sandbox-escape

27.

From XSS to RCE: Two Exploit Chains in ConcreteCMS

vulnerability | 2026-10-04 00:00 | tenzai.com | Original ↗ | .md | #rce | #web-security | #xss

28.

Next.js next/og SVG Injection to Native RCE Exploit PoC (CVE-2026-94545)

vulnerability | Critical | 2026-09-29 07:52 | CVE-2026-94545 | github.com | Original ↗ | .md | #bug-bounty | #rce | #red-team

29.

MicroTrick: MikroTik RouterOS Unauthenticated Takeover Exploit PoC (CVE-2026-86060)

vulnerability | Critical | Actively exploited | 2026-09-22 13:41 | CVE-2026-86060 | github.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day

30.

From AI Agents to RCE - Building a Vulnerability Research Workflow

vulnerability | 2026-09-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #rce | #vulnerability-research