RuntimeRebel — #Remote Code Execution

CVE-2026-73749: HPE ArubaOS-CX RCE Flaw Patched

Thu, 03 Sep 2026 19:00:03 GMT

HPE patches a critical remote code execution flaw, CVE-2026-73749, in ArubaOS-CX switches. Unauthenticated attackers can exploit a buffer overflow.

Critical Cisco Nexus 9000 RCE (CVE-2026-20212) & IOS XR Hardening

Thu, 03 Sep 2026 18:59:35 GMT

Cisco addresses a critical RCE flaw (CVE-2026-20212) in Nexus 9000 switches, alongside significant IOS XR hardening updates.

CVE-2026-9586: Sangoma Switchvox RCE via SQL Injection

Wed, 02 Sep 2026 19:12:29 GMT

Sangoma Switchvox is affected by CVE-2026-9586, an unauthenticated remote SQL injection vulnerability enabling RCE, with active exploitation confirmed.

CVE-2026-49869: Kestra OSS OS Command Injection Exploited

Wed, 02 Sep 2026 19:11:22 GMT

CISA has added CVE-2026-49869, an OS command injection in Kestra OSS, to its KEV catalog, confirming active exploitation by unauthenticated attackers.

CVE-2021-23758: Ajax.NET RCE via Deserialization of Untrusted Data

Tue, 01 Sep 2026 02:58:41 GMT

CVE-2021-23758 in Ajax.NET Professional allows remote code execution via untrusted data deserialization, with CISA confirming active exploitation.

CVE-2026-60004: Gitea Code Injection Under Active Exploitation

Wed, 26 Aug 2026 00:45:21 GMT

CISA confirms active exploitation of CVE-2026-60004, a Gitea code injection vulnerability allowing shell command execution with repository write access.

Microsoft Entra ID RCE Flaw CVE-2026-69836 Fully Mitigated

Sun, 23 Aug 2026 08:18:38 GMT

Microsoft has fully mitigated a critical remote code execution flaw, CVE-2026-69836, in Entra ID (formerly Azure AD). No customer action is required.

CVE-2026-72529: Critical RCE in TrueConf Server via Missing Auth

Fri, 21 Aug 2026 00:48:00 GMT

CISA warns of active exploitation of CVE-2026-72529 in TrueConf Server, allowing remote attackers to execute arbitrary scripts via port 4307/TCP.

CVE-2026-72530: TrueConf Server Remote Code Execution

Fri, 21 Aug 2026 00:47:12 GMT

CISA confirms active exploitation of CVE-2026-72530, a TrueConf Server code injection flaw leading to remote code execution. Immediate patching is critical.

Zimbra CVE-2026-73570 Actively Exploited: Patch Now

Thu, 20 Aug 2026 16:24:30 GMT

Active exploitation targets Zimbra servers via CVE-2026-73570, a high-severity flaw allowing unauthenticated RCE. Patch to v10.1.20 now.

CVE-2026-32475: Elementor Pro Unauthenticated RCE Flaw

Thu, 20 Aug 2026 08:26:43 GMT

A critical flaw, CVE-2026-32475, in Elementor Pro allows unauthenticated attackers to upload PHP files and execute code, affecting versions <= 4.2.1.

CVE-2026-33824: Microsoft IKE Double Free RCE Exploit

Wed, 19 Aug 2026 00:43:34 GMT

CISA confirms active exploitation of CVE-2026-33824 in Microsoft Internet Key Exchange (IKE) Service Extensions, enabling remote code execution.

Unisoc Modem Exploit Chain: Android Takeover via Video Call

Tue, 18 Aug 2026 00:41:53 GMT

An exploit chain targeting Unisoc modems allows remote Android device takeover through a malicious video call, requiring victim interaction.

CVE-2025-62593: Ray-Project Ray RCE Exploited In Wild

Mon, 17 Aug 2026 16:20:50 GMT

CISA confirms active exploitation of CVE-2025-62593, a critical code injection vulnerability in Ray-Project Ray allowing remote code execution. Developers are targeted.

SharePoint RCE via CVE-2026-55040 & CVE-2026-63520: Patch Now

Mon, 17 Aug 2026 00:39:44 GMT

An AI-assisted exploit chain, leveraging CVE-2026-55040 and CVE-2026-63520, enables unauthenticated RCE on Microsoft SharePoint Server. Immediate patching is critical.

CVE-2026-72898: Metabase SQL Injection Active Exploitation

Wed, 12 Aug 2026 01:08:08 GMT

CISA adds Metabase CVE-2026-72898 SQL injection to its KEV catalog, enabling unauthenticated remote attackers to gain admin access.

CVE-2026-63077: JetBrains TeamCity RCE via Deserialization

Tue, 11 Aug 2026 16:54:33 GMT

CISA adds CVE-2026-63077 to KEV, indicating active exploitation of a JetBrains TeamCity deserialization RCE vulnerability.

Metabase Zero-Day SQL Vulnerability Threatens Analytics Platforms

Tue, 11 Aug 2026 16:50:53 GMT

Unpatched Metabase business-analytics zero-day vulnerability allows remote administrative access and threatens downstream corporate networks.

CVE-2026-53413: Zoom Zero-Click RCE – Patch Now

Tue, 11 Aug 2026 16:49:49 GMT

Zoom patches CVE-2026-53413, a critical zero-click RCE in its annotator function, affecting all clients. Immediate patching is advised.

Pixel 9 Zero-Click RCE: Exploiting Dolby Unified Decoder

Sat, 08 Aug 2026 08:35:48 GMT

Project Zero details a zero-click exploit chain targeting Google Pixel 9 via the Dolby Unified Decoder, leading to arbitrary code execution.

Bendix EC80 Hidden RCE and DoS Flaws in Brake Controllers

Sat, 08 Aug 2026 08:29:05 GMT

NMFTA reveals Bendix EC80 heavy-truck brake controllers fixed critical, wirelessly reachable remote code execution and DoS flaws in a safety recall.

CVE-2026-8037: Progress LoadMaster Command Injection RCE

Sat, 08 Aug 2026 01:04:01 GMT

Progress LoadMaster command injection (CVE-2026-8037) allows unauthenticated attackers to execute arbitrary commands. Active exploitation confirmed by CISA.

Google ADK for Python RCE: Agent-to-Agent Attacks Expose Secrets

Tue, 04 Aug 2026 11:22:21 GMT

Pillar Security uncovered agent-to-agent RCE flaws in Google's ADK for Python, allowing secret exposure and PR tampering, risking supply chain integrity.

CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now

Sun, 02 Aug 2026 16:49:14 GMT

CISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…

VMware Critical Flaws: Auth Bypass, RCE, VM Escapes Patched

Thu, 30 Jul 2026 21:12:31 GMT

VMware has patched critical vulnerabilities across vCenter, ESX, Workstation, and Fusion, addressing authentication bypass, remote code execution, and VM escapes.

CVE-2024-24691: Zoom Windows Client Account Takeover - Patch Now

Wed, 15 Jul 2026 21:05:22 GMT

Zoom has addressed CVE-2024-24691, a critical 9.6 CVSS vulnerability in Windows clients allowing unauthenticated account takeover. Learn how to patch and defend.

CVE-2026-45659: SharePoint RCE Exploitation - Mitigation Guide

Thu, 02 Jul 2026 07:34:50 GMT

CISA adds CVE-2026-45659, a high-severity SharePoint Server deserialization flaw, to KEV catalog after confirmed active exploitation by threat actors.

CryptoBandits Malware: Tor-Abusing Backdoor & Data Theft

Fri, 19 Jun 2026 16:55:32 GMT

CryptoBandits malware functions as a backdoor, leveraging Tor and a SOCKS5 proxy for stealthy data theft and remote code execution capabilities.

Gogs RCE via CVE-2024-39930 — Mitigation and Patch Guide

Fri, 29 May 2026 13:19:23 GMT

A critical argument injection in Gogs (CVE-2024-39930) allows authenticated users to achieve RCE via malicious pull requests. Learn how to patch and defend.

Gogs Authenticated RCE: Arbitrary Code Execution - Mitigation Guide

Thu, 28 May 2026 20:52:47 GMT

A critical RCE vulnerability in Gogs allows authenticated users to execute arbitrary code. Runtime Rebel provides an analysis and urgent mitigation guidance.

Exim RCE: Unauthenticated Remote Code Execution Critical Flaw

Wed, 13 May 2026 20:39:16 GMT

A new critical flaw in Exim mailer allows unauthenticated remote code execution on certain configurations. Immediate patching is vital for security professionals.

cPanel CVE-2026-41940 Exploitation: 40,000 Servers Compromised

Mon, 04 May 2026 08:56:30 GMT

Attackers leverage a zero-day vulnerability in cPanel, identified as CVE-2026-41940, to gain administrative access to over 40,000 hosting servers.

CVE-2024-36985: Splunk Enterprise RCE via File Upload - Patch Guide

Thu, 16 Apr 2026 12:34:23 GMT

Splunk patches a high-severity RCE vulnerability (CVE-2024-36985) allowing low-privileged users to execute code on Windows-based Enterprise instances.

Adobe Reader Zero-Day Exploited via Malicious PDF Documents

Thu, 09 Apr 2026 12:41:49 GMT

Researchers reveal a sophisticated Adobe Reader zero-day exploit used in the wild since late 2025, involving malicious PDF invoices to compromise systems.

Apache ActiveMQ Classic RCE via Jolokia API: Patch Now

Thu, 09 Apr 2026 00:35:30 GMT

An unauthenticated Remote Code Execution flaw, present for 13 years, impacts Apache ActiveMQ Classic, allowing full system compromise. Immediate patching is critical.

Ninja Forms RCE via Arbitrary File Upload: Mitigation Guide

Wed, 08 Apr 2026 12:28:42 GMT

Hackers are actively exploiting a critical Ninja Forms vulnerability to upload arbitrary files and achieve RCE. Learn how to secure your WordPress site now.

Quest KACE SMA CVE-2025-32975 Exploited — Critical Patch Guidance

Mon, 23 Mar 2026 08:25:12 GMT

Threat actors are exploiting a critical CVSS 10.0 vulnerability, CVE-2025-32975, in Quest KACE Systems Management Appliances exposed to the internet.

Microsoft March Patch Tuesday: 84 Flaws Fixed Including Public Zero-Days

Wed, 11 Mar 2026 12:19:24 GMT

Microsoft releases March security updates for 84 vulnerabilities, including 8 Critical flaws and 2 public zero-days. Patch now to prevent RCE and privilege escalation.

CVE-2025-0282: Ivanti Connect Secure Heap Overflow — Mitigation Guide

Wed, 04 Mar 2026 04:37:49 GMT

Technical analysis of the Ivanti Connect Secure heap overflow (CVE-2025-0282) allowing unauthenticated RCE. Includes detection steps and patch guidance.

Trend Micro Patches Critical RCE Flaws in Apex One Security Platform

Thu, 26 Feb 2026 20:15:07 GMT

Trend Micro addresses two critical vulnerabilities, CVE-2023-32524 and CVE-2023-32525, in its Apex One platform that allow for remote code execution.

Claude Code Flaws Enable RCE & API Key Exfiltration

Wed, 25 Feb 2026 20:15:32 GMT

Multiple security flaws in Anthropic's Claude Code AI coding assistant allow remote code execution and API credential theft via configuration mechanisms.

VMware Aria Operations RCE Vulnerability Patched

Wed, 25 Feb 2026 04:42:44 GMT

Broadcom patched high-severity vulnerabilities in VMware Aria Operations, including an RCE flaw. Organizations must update immediately to mitigate risk.