Curated security research, vulnerabilities, advisories and tools for practitioners.

#rce

Security coverage tagged rce.

1.

James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup

vulnerability | 2026-09-15 12:39 | yeswehack.com | original ↗ | #ai-security | #rce | #http-desync

2.

Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

vulnerability | 2026-09-09 16:06 | wiz.io | original ↗ | #cloud | #rce | #cloud-security

3.

CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC

vulnerability | Critical | 2026-09-05 06:23 | CVE-2026-32475 | github.com | original ↗ | #bug-bounty | #rce | #wordpress

4.

StyleSmuggler fix: patch the Magento and Adobe Commerce RCE

advisory | 2026-09-07 00:00 | aikido.dev | original ↗ | #rce | #zero-day | #patching

5.

MECCHA CHAMELEON can't hide from the RCE

vulnerability | 2026-09-03 00:00 | aikido.dev | original ↗ | #rce | #gaming | #game-security

6.

Critical remote code execution in vm2, a widely used Node.js sandbox library

vulnerability | 2026-09-02 00:00 | about.gitlab.com | original ↗ | #rce | #gitlab | #sandbox-escape

7.

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

vulnerability | Critical | 2026-08-26 00:00 | bishopfox.com | original ↗ | #rce | #backup-security | #authentication

8.

Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days

blog | 2026-08-31 22:00 | blog.quarkslab.com | original ↗ | #rce | #php | #0day

9.

Log4j FilteredObjectInputStream Bypass: Pre-auth RCE via MarshalledObject

vulnerability | Critical | 2026-08-26 15:44 | github.com | original ↗ | #rce | #public-poc | #java

10.

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

blog | 2026-09-01 14:53 | hackerone.com | original ↗ | #ai-security | #rce | #vulnerability-research

11.

The latest from HackerOne

blog | 2026-09-01 14:53 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #rce

12.

GeoNetwork - PreAuth Remote Code Execution

research | 2026-08-31 00:00 | ethiack.com | original ↗ | #rce | #open-source | #pre-auth

13.

Heap buffer overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items

vulnerability | Critical | 2026-08-25 11:17 | github.com | original ↗ | #rce | #memory-corruption | #vulnerability

14.

Flexense SyncBreeze – Unauthenticated Remote Code Execution (0DAY-2025-0002)

vulnerability | Critical | 2026-08-25 06:58 | crowdfense.com | original ↗ | #rce | #zero-day | #authentication-bypass

15.

dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC

research | 2026-08-30 05:15 | CVE-2026-82222 | github.com | original ↗ | #rce | #php | #wordpress

16.

Inside 90 days of attacks on AI infrastructure

research | 2026-08-27 16:33 | wiz.io | original ↗ | #ai-security | #cloud | #rce

17.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

research | 2026-08-27 00:00 | CVE-2026-7899 | nebusec.ai | original ↗ | #ai-security | #bug-bounty | #rce

18.

CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitation

vulnerability | Critical | Actively exploited | 2026-08-07 08:38 | CVE-2026-63077 | github.com | original ↗ | #active-exploitation | #rce | #public-poc

19.

Dojo challenge #53 Hacker Club solution

blog | 2026-08-26 07:42 | yeswehack.com | original ↗ | #bug-bounty | #rce | #pentesting

20.

Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities

blog | 2026-08-26 00:00 | CVE-2023-49105 | hunt.io | original ↗ | #rce | #threat-intelligence | #attack-surface

21.

Critical remote code execution in Serena, a popular MCP coding agent

vulnerability | Critical | 2026-08-17 00:00 | about.gitlab.com | original ↗ | #rce | #supply-chain | #gitlab

22.

Yet another RCE in Gogs, but it's fixed this time!

vulnerability | 2026-08-19 00:00 | aikido.dev | original ↗ | #rce | #gitlab | #xss

23.

XSS2Shell: WordPress pre-auth XSS to RCE chain (CVE-2026-64638)

vulnerability | High | 2026-08-07 15:25 | CVE-2026-64638 | pwn.ai | original ↗ | #ai-security | #rce | #public-poc

24.

CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation

vulnerability | Critical | 2026-08-14 15:01 | CVE-2026-8452 | github.com | original ↗ | #rce | #public-poc | #pre-auth

25.

CVE-2026-15748 — WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload

research | 2026-08-18 00:00 | CVE-2026-15748 | aretiq.ai | original ↗ | #ai-security | #rce | #wordpress

26.

CVE-2023-25157 PoC: GeoServer jsonArrayContains SQL injection to PostgreSQL RCE

tool | 2026-08-13 21:11 | CVE-2023-25157 | gist.github.com | original ↗ | #rce | #public-poc | #sql-injection

27.

From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse

research | 2026-08-11 00:00 | lab.ctbb.show | original ↗ | #rce | #supply-chain | #zero-day

28.

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066)

vulnerability | Critical | 2026-07-29 00:00 | CVE-2026-66066 | ethiack.com | original ↗ | #rce | #ruby-on-rails | #active-storage

29.

CVE-2026-60004: Gitea diffpatch remote code execution with public PoC

vulnerability | Critical | 2026-07-28 00:00 | CVE-2026-60004 | github.com | original ↗ | #rce | #gitea | #git

30.

CVE-2026-26119 PoC: Windows Admin Center authenticated RCE

tool | 2026-08-09 20:21 | CVE-2026-26119 | github.com | original ↗ | #rce | #public-poc | #privilege-escalation