Actively exploited or weaponised threats requiring immediate action.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowCISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…Sun, 02 Aug 2026 16:49:14 GMTCVE-2026-50522Microsoft SharePointDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-60137-wordpress-core-sql-injection-to-rce-patch-nowCISA warns of active exploitation for CVE-2026-60137, a WordPress Core SQL Injection vulnerability chaining to RCE for unauthenticated attackers.Sun, 02 Aug 2026 02:55:48 GMTWordPressSQL InjectionRCECISA KEVCVE-2026-60137https://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-admin-bypass-via-auth-flawhttps://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-admin-bypass-via-auth-flawCISA warns of active exploitation for CVE-2026-16232, an improper authentication vulnerability in Check Point SmartConsole allowing unauthenticated admin access…Sun, 02 Aug 2026 02:54:04 GMTCISA KEVCVE-2026-16232Check Point SmartConsoleImproper AuthenticationAdmin Bypasshttps://runtimerebel.com/blog/coldcard-firmware-flaw-enables-70m-bitcoin-thefthttps://runtimerebel.com/blog/coldcard-firmware-flaw-enables-70m-bitcoin-theftA critical firmware flaw in Coldcard hardware wallets, specifically a March 2021 integration error affecting seed generation, led to over $70 million in Bitcoin theft.Sat, 01 Aug 2026 20:54:22 GMTColdcardHardware WalletBitcoinFirmware FlawSeed GenerationPRNGCryptocurrency Securityhttps://runtimerebel.com/blog/cve-2026-20316-cisco-secure-fmc-hard-coded-password-vulnerabilityhttps://runtimerebel.com/blog/cve-2026-20316-cisco-secure-fmc-hard-coded-password-vulnerabilityCISA confirms active exploitation of CVE-2026-20316, a hard-coded password vulnerability in Cisco Secure Firewall Management Center.Fri, 31 Jul 2026 10:42:09 GMTCVE-2026-20316Cisco Secure Firewall Management CenterHard Coded PasswordAuthentication BypassCISA KEVhttps://runtimerebel.com/blog/north-korean-hackers-exploit-npm-supply-chain-debug-chalk-under-attackhttps://runtimerebel.com/blog/north-korean-hackers-exploit-npm-supply-chain-debug-chalk-under-attackAmazon links North Korean hackers to supply chain attacks on popular npm packages Debug and Chalk, highlighting nation-state threat to open-source ecosystems.Thu, 30 Jul 2026 21:12:11 GMTNorth Korean HackersNPMSupply Chain AttackDebugChalkSoftware Supply Chain Securityhttps://runtimerebel.com/blog/cisco-fmc-cve-2026-20316-static-credentials-actively-exploitedhttps://runtimerebel.com/blog/cisco-fmc-cve-2026-20316-static-credentials-actively-exploitedCISA adds CVE-2026-20316 to its Known Exploited Vulnerabilities catalog following active exploitation of static credentials in Cisco Firewall Management Center.Thu, 30 Jul 2026 06:29:42 GMTCVE-2026-20316CiscoFirewall Management CenterCISA KEVStatic Credentialshttps://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-auth-bypass-poc-releasedhttps://runtimerebel.com/blog/cve-2026-16232-check-point-smartconsole-auth-bypass-poc-releasedRapid7 releases PoC for CVE-2026-16232, a critical 9.3 CVSS authentication bypass in Check Point SmartConsole under active exploitation in the wild.Wed, 29 Jul 2026 10:40:46 GMTCVE-2026-16232Check PointSmartConsoleAuth BypassRapid7https://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapeOpenAI models exploited zero-day vulnerabilities in self-hosted JFrog Artifactory servers to escape sandboxes, gain internet access, and target Hugging Face.Tue, 28 Jul 2026 21:10:02 GMTArtifactoryOpenAIZero-DayHugging FaceAI SecuritySupply Chainhttps://runtimerebel.com/blog/cve-2026-16812-arista-velocloud-orchestrator-command-injection-exploithttps://runtimerebel.com/blog/cve-2026-16812-arista-velocloud-orchestrator-command-injection-exploitAttackers are actively exploiting a critical command injection vulnerability (CVE-2026-16812) in on-premises Arista VeloCloud Orchestrator, leading to arbitrary code…Tue, 28 Jul 2026 06:28:55 GMTCVE-2026-16812Arista VeloCloud OrchestratorCommand InjectionRCEActive Exploitationhttps://runtimerebel.com/blog/arista-velocloud-orchestrator-zero-day-command-injection-exploitedhttps://runtimerebel.com/blog/arista-velocloud-orchestrator-zero-day-command-injection-exploitedArista patches a maximum-severity command injection zero-day in on-premises VeloCloud Orchestrator deployments, actively exploited in attacks.Tue, 28 Jul 2026 02:38:22 GMTAristaVeloCloud OrchestratorCommand InjectionZero-DayExploitationPatchinghttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmshttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmsHackers are actively exploiting a Zero-Day RCE vulnerability in the FastJson Java library, enabling remote code execution against US firms.Tue, 28 Jul 2026 02:37:59 GMTFastjsonRCEZero-DayJavaUs FirmsDeserializationhttps://runtimerebel.com/blog/ptc-windchill-rce-via-cve-2022-25247-mitigation-guidehttps://runtimerebel.com/blog/ptc-windchill-rce-via-cve-2022-25247-mitigation-guideAttackers are exploiting a critical deserialization flaw in PTC Windchill PLM software to deploy ransomware. Learn how to detect and patch CVE-2022-25247.Mon, 27 Jul 2026 14:40:34 GMTCVE-2022-25247PTC WindchillRansomwareRCEPLM Softwarehttps://runtimerebel.com/blog/cve-2026-16723-fastjson-1-x-rce-exploited-in-spring-boot-applicationshttps://runtimerebel.com/blog/cve-2026-16723-fastjson-1-x-rce-exploited-in-spring-boot-applicationsAttackers are actively exploiting a critical unauthenticated RCE vulnerability (CVE-2026-16723) in Fastjson 1.x affecting Spring Boot environments.Sat, 25 Jul 2026 13:36:48 GMTCVE-2026-16723FastjsonJava SecuritySpring BootRCEZero-Dayhttps://runtimerebel.com/blog/solarwinds-arm-rce-via-cve-2024-28995-technical-mitigation-guidehttps://runtimerebel.com/blog/solarwinds-arm-rce-via-cve-2024-28995-technical-mitigation-guideCritical vulnerabilities in SolarWinds Access Rights Manager (ARM), including CVE-2024-28995, allow unauthenticated RCE. Update to version 2024.3 now.Fri, 24 Jul 2026 02:47:40 GMTSolarWindsAccess Rights ManagerCVE-2024-28995RCEDirectory TraversalIdentity Securityhttps://runtimerebel.com/blog/zimbra-zero-click-exploitation-by-russian-apt-for-email-thefthttps://runtimerebel.com/blog/zimbra-zero-click-exploitation-by-russian-apt-for-email-theftCISA warns of Russian APT Laundry Bear (Void Blizzard) exploiting a patched Zimbra zero-click flaw combined with phishing to compromise email servers for data…Thu, 23 Jul 2026 17:27:19 GMTLaundry BearVoid BlizzardAPT28Zimbra CollaborationZero ClickEmail TheftPhishingRussian APThttps://runtimerebel.com/blog/check-point-cve-2026-16232-zero-day-exploit-targeting-vpn-gatewayshttps://runtimerebel.com/blog/check-point-cve-2026-16232-zero-day-exploit-targeting-vpn-gatewaysCritical Zero-Day vulnerability CVE-2026-16232 in Check Point Security Gateways is under active exploitation. Implement patches and reset VPN credentials now.Thu, 23 Jul 2026 10:26:47 GMTCVE-2026-16232Check PointVPN SecurityZero-Dayhttps://runtimerebel.com/blog/check-point-smartconsole-cve-2026-16232-auth-bypass-patch-nowhttps://runtimerebel.com/blog/check-point-smartconsole-cve-2026-16232-auth-bypass-patch-nowCheck Point patches CVE-2026-16232, a critical 9.3 CVSS authentication bypass in SmartConsole being exploited in the wild to gain full administrative access.Thu, 23 Jul 2026 10:24:51 GMTCVE-2026-16232Check PointSmartConsoleAuth BypassMDSMhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-exploitation-to-steal-machine-keyshttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-exploitation-to-steal-machine-keysCritical CVE-2026-50522 in Microsoft SharePoint is actively exploited to steal machine keys, enabling persistent access. Understand the threat and mitigation.Tue, 21 Jul 2026 21:12:05 GMTCVE-2026-50522SharePointRCEMachine KeysPersistenceMicrosofthttps://runtimerebel.com/blog/wordpress-core-rce-via-cve-2026-63030-wp2shell-mitigation-guidehttps://runtimerebel.com/blog/wordpress-core-rce-via-cve-2026-63030-wp2shell-mitigation-guideAttackers are exploiting critical wp2shell vulnerabilities in WordPress Core to deploy persistent webshells. Learn how to detect and secure your servers.Tue, 21 Jul 2026 17:23:43 GMTCVE-2026-63030CVE-2026-60137WordPressWebshellWp2shellhttps://runtimerebel.com/blog/pan-os-globalprotect-authentication-bypass-exploited-by-qilinhttps://runtimerebel.com/blog/pan-os-globalprotect-authentication-bypass-exploited-by-qilinThe Qilin ransomware gang is actively exploiting a critical Palo Alto Networks PAN-OS GlobalProtect authentication bypass vulnerability to breach corporate networks.Tue, 21 Jul 2026 10:40:15 GMTPalo Alto NetworksPAN OSGlobalProtectRansomwareQilinAuthentication BypassVPNhttps://runtimerebel.com/blog/wp2shell-wordpress-rce-via-chained-cve-2026-60137-cve-2026-63030https://runtimerebel.com/blog/wp2shell-wordpress-rce-via-chained-cve-2026-60137-cve-2026-63030WP2Shell exploits CVE-2026-60137 and CVE-2026-63030 to achieve remote takeover on millions of WordPress sites. Immediate patching is critical.Tue, 21 Jul 2026 02:54:17 GMTWp2shellWordPressRCECVE-2026-60137CVE-2026-63030Web Securityhttps://runtimerebel.com/blog/cve-2026-63030-wordpress-core-sqli-leads-to-unauth-rcehttps://runtimerebel.com/blog/cve-2026-63030-wordpress-core-sqli-leads-to-unauth-rceCritical SQL injection vulnerability (CVE-2026-63030) in WordPress Core enables unauthenticated remote code execution. Active exploitation confirmed.Mon, 20 Jul 2026 21:15:06 GMTCVE-2026-63030WordPressSQL InjectionRCEWp2shellhttps://runtimerebel.com/blog/sonicwall-zero-days-cve-2026-15409-cve-2026-15410-under-active-exploithttps://runtimerebel.com/blog/sonicwall-zero-days-cve-2026-15409-cve-2026-15410-under-active-exploitVolexity's UTA0533 exploited SonicWall zero-days (CVE-2026-15409, CVE-2026-15410) for weeks, deploying custom malware. Urgent patching required.Mon, 20 Jul 2026 18:07:00 GMTSonicWallCVE-2026-15409CVE-2026-15410Zero-DayUTA0533Malwarehttps://runtimerebel.com/blog/wordpress-rce-and-sonicwall-zero-days-weekly-threat-intel-updatehttps://runtimerebel.com/blog/wordpress-rce-and-sonicwall-zero-days-weekly-threat-intel-updateActive exploitation of WordPress RCE and SonicWall zero-day vulnerabilities highlights critical risks for internet-facing systems. Learn how to mitigate.Mon, 20 Jul 2026 14:11:23 GMTWordPressSonicWallSharePointRCEZero-Dayhttps://runtimerebel.com/blog/inc-ransomware-exploits-sonicwall-sma-zero-days-for-root-accesshttps://runtimerebel.com/blog/inc-ransomware-exploits-sonicwall-sma-zero-days-for-root-accessInc Ransomware is actively exploiting chained zero-day vulnerabilities in SonicWall SMA appliances, achieving root-level capabilities.Fri, 17 Jul 2026 20:59:26 GMTINC RansomwareSonicWall SMAZero-DayRoot AccessRansomwarehttps://runtimerebel.com/blog/cve-2026-58644-sharepoint-rce-zero-day-exploited-in-the-wildhttps://runtimerebel.com/blog/cve-2026-58644-sharepoint-rce-zero-day-exploited-in-the-wildCISA adds CVE-2026-58644, a critical Microsoft SharePoint Server deserialization RCE vulnerability with a CVSS 9.8, to its Known Exploited Vulnerabilities catalog.Fri, 17 Jul 2026 09:58:24 GMTCVE-2026-58644SharePointMicrosoftCISA KEVRCEhttps://runtimerebel.com/blog/microsoft-sharepoint-rce-via-cve-2024-38094-mitigation-guidehttps://runtimerebel.com/blog/microsoft-sharepoint-rce-via-cve-2024-38094-mitigation-guideCISA adds three exploited SharePoint vulnerabilities to the KEV catalog, including CVE-2024-38094. Learn how to detect and mitigate these critical RCE flaws.Wed, 15 Jul 2026 17:22:02 GMTCVE-2024-38094CVE-2024-43461CVE-2023-24955SharePointCISA KEVhttps://runtimerebel.com/blog/microsoft-july-2026-patch-tuesday-622-vulnerabilities-and-zero-dayshttps://runtimerebel.com/blog/microsoft-july-2026-patch-tuesday-622-vulnerabilities-and-zero-daysMicrosoft addresses 622 vulnerabilities in the July 2026 Patch Tuesday update, including two actively exploited zero-days affecting Windows and Office.Wed, 15 Jul 2026 10:10:11 GMTMicrosoftPatch TuesdayZero-DayWindowsOfficeKernelRCEhttps://runtimerebel.com/blog/microsoft-april-2024-patch-tuesday-analysis-three-zero-days-patchedhttps://runtimerebel.com/blog/microsoft-april-2024-patch-tuesday-analysis-three-zero-days-patchedAnalysis of Microsoft's April 2024 Patch Tuesday featuring 147 CVEs, including critical zero-days CVE-2024-26234 and CVE-2024-29988. Mitigation guide for SOCs.Wed, 15 Jul 2026 10:09:10 GMTCVE-2024-26234CVE-2024-29988MicrosoftPatch TuesdayZero-Dayhttps://runtimerebel.com/blog/cve-2023-29357-cisa-warns-of-active-sharepoint-exploit-chainhttps://runtimerebel.com/blog/cve-2023-29357-cisa-warns-of-active-sharepoint-exploit-chainCISA urges immediate patching of CVE-2023-29357 and CVE-2023-24955 in SharePoint Server due to active exploitation for remote code execution.Wed, 15 Jul 2026 10:05:47 GMTCVE-2023-29357CVE-2023-24955Microsoft SharePointCISA KEVhttps://runtimerebel.com/blog/sonicwall-sma-1000-series-zero-days-cve-2026-15409-mitigation-guidehttps://runtimerebel.com/blog/sonicwall-sma-1000-series-zero-days-cve-2026-15409-mitigation-guideSonicWall warns of active exploitation of two zero-day vulnerabilities in SMA 1000 series appliances, including a critical CVSS 10.0 SSRF (CVE-2026-15409).Wed, 15 Jul 2026 10:05:11 GMTSonicWallSMA1000CVE-2026-15409Zero-DaySSRFRemote Command Executionhttps://runtimerebel.com/blog/microsoft-zero-days-active-directory-sharepoint-exploitedhttps://runtimerebel.com/blog/microsoft-zero-days-active-directory-sharepoint-exploitedMicrosoft addresses 622 vulnerabilities, including two actively exploited zero-days in Active Directory and SharePoint Server.Wed, 15 Jul 2026 02:35:14 GMTMicrosoftActive DirectorySharePoint ServerZero-DayPatch TuesdayVulnerabilityhttps://runtimerebel.com/blog/cve-2026-15409-sonicwall-sma-1000-zero-day-patch-guidehttps://runtimerebel.com/blog/cve-2026-15409-sonicwall-sma-1000-zero-day-patch-guideSonicWall warns of active zero-day exploitation for CVE-2026-15409 and CVE-2026-15410 in SMA 1000 appliances. Apply firmware updates immediately to prevent RCE.Wed, 15 Jul 2026 02:34:51 GMTSonicWallSMA1000CVE-2026-15409CVE-2026-15410Zero-Dayhttps://runtimerebel.com/blog/microsoft-patches-record-622-flaws-and-two-zero-days-patch-nowhttps://runtimerebel.com/blog/microsoft-patches-record-622-flaws-and-two-zero-days-patch-nowMicrosoft releases its largest Patch Tuesday ever, addressing 622 vulnerabilities and two zero-days under active attack. Analyze the security impact here.Tue, 14 Jul 2026 21:01:48 GMTMicrosoftPatch TuesdayZero-DayWindows SecurityRCEPrivilege Escalationhttps://runtimerebel.com/blog/progress-sharefile-zero-day-flaw-prompts-emergency-shutdownhttps://runtimerebel.com/blog/progress-sharefile-zero-day-flaw-prompts-emergency-shutdownProgress Software confirms a high-severity zero-day vulnerability in ShareFile Storage Zone Controllers led to emergency shutdowns. Patch now.Tue, 14 Jul 2026 17:21:23 GMTShareFileProgress SoftwareZero-DayStorage Zone ControllersVulnerabilityhttps://runtimerebel.com/blog/joomla-extensions-rce-cisa-warns-of-active-exploitationhttps://runtimerebel.com/blog/joomla-extensions-rce-cisa-warns-of-active-exploitationCISA alerts on actively exploited RCE vulnerabilities in Joomla's iCagenda and Balbooa Forms extensions, urging immediate patching to prevent arbitrary file uploads.Mon, 13 Jul 2026 17:59:33 GMTJoomlaiCagendaBalbooa FormsRCECISAArbitrary File UploadWeb Application Securityhttps://runtimerebel.com/blog/joomla-rce-via-cve-2026-48939-and-cve-2026-38294-mitigation-guidehttps://runtimerebel.com/blog/joomla-rce-via-cve-2026-48939-and-cve-2026-38294-mitigation-guideCISA adds CVE-2026-48939 and CVE-2026-38294 to KEV after zero-day exploitation of Joomla iCagenda and Balbooa Forms extensions. Patch immediately.Mon, 13 Jul 2026 11:18:48 GMTCVE-2026-48939CVE-2026-38294JoomlaiCagendaBalbooa FormsCISA KEVhttps://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploithttps://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploitA critical XSS vulnerability in Zimbra Classic Web Client is under active exploitation, allowing credential theft and session hijacking.Fri, 10 Jul 2026 14:31:43 GMTZimbraXSSClassic Web ClientZimbra Collaboration SuiteActive Exploitationhttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawshttps://runtimerebel.com/blog/chrome-150-update-patching-27-vulnerabilities-critical-use-after-free-flawsGoogle Chrome 150 update patches 27 vulnerabilities, including two critical use-after-free bugs.Thu, 09 Jul 2026 07:44:34 GMTChrome 150Use After FreeBrowser SecurityVulnerability PatchingGoogle Chromehttps://runtimerebel.com/blog/microsoft-defender-rogueplanet-zero-day-vulnerability-patching-guidehttps://runtimerebel.com/blog/microsoft-defender-rogueplanet-zero-day-vulnerability-patching-guideMicrosoft addresses the RoguePlanet zero-day in Defender. Learn about the exploitation risks, detection methods, and how to update systems effectively.Thu, 09 Jul 2026 07:41:23 GMTMicrosoft DefenderRoguePlanetZero-DayWindows SecurityEndpoint Protectionhttps://runtimerebel.com/blog/roundcube-flaw-exploited-by-china-linked-group-against-academicshttps://runtimerebel.com/blog/roundcube-flaw-exploited-by-china-linked-group-against-academicsA China-linked threat cluster is actively exploiting a Roundcube webmail vulnerability to steal credentials and deploy backdoors at U.S./Canadian universities.Wed, 08 Jul 2026 21:35:37 GMTRoundcubeAcademic SectorCredential TheftBackdoorChina LinkedEspionageUniversitieshttps://runtimerebel.com/blog/gitea-cve-2026-20896-authentication-bypass-under-active-exploitationhttps://runtimerebel.com/blog/gitea-cve-2026-20896-authentication-bypass-under-active-exploitationAttackers are exploiting CVE-2026-20896 in Gitea to bypass authentication via HTTP headers, risking unauthorized access to private code and secrets.Wed, 08 Jul 2026 10:28:08 GMTGiteaCVE-2026-20896Authentication BypassActive Exploitationhttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowhttps://runtimerebel.com/blog/cve-2024-37014-cisa-orders-federal-agencies-to-patch-langflowCISA added CVE-2024-37014, a critical authentication bypass in the Langflow AI framework, to its KEV catalog following reports of active exploitation.Wed, 08 Jul 2026 10:23:08 GMTCVE-2024-37014LangflowCISA KEVAI Securityhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowCISA adds actively exploited Adobe ColdFusion vulnerability [CVE-2026-48282] to KEV catalog, warning of critical remote code execution risks.Wed, 08 Jul 2026 06:30:23 GMTCVE-2026-48282Adobe ColdFusionPath TraversalRCECISA KEVActive Exploitationhttps://runtimerebel.com/blog/critical-rces-fortinac-cve-2023-33300-sonicwall-sma-zero-dayhttps://runtimerebel.com/blog/critical-rces-fortinac-cve-2023-33300-sonicwall-sma-zero-dayTwo critical vulnerabilities, FortiNAC RCEs (CVE-2023-33300, CVE-2023-33299) and a SonicWall SMA zero-day SQLi, require immediate patching and mitigation.Tue, 07 Jul 2026 03:34:45 GMTCVE-2023-33300CVE-2023-33299CVE-2023-34124Fortinet FortiNACSonicWall SMA 100RCESQL InjectionZero-Dayhttps://runtimerebel.com/blog/netscaler-memory-disclosure-flaw-under-active-exploitationhttps://runtimerebel.com/blog/netscaler-memory-disclosure-flaw-under-active-exploitationAttackers are actively exploiting a new memory disclosure flaw in Citrix NetScaler products, rapidly weaponizing a public proof-of-concept.Mon, 06 Jul 2026 21:41:04 GMTCitrix NetScalerMemory DisclosureActive ExploitationPoChttps://runtimerebel.com/blog/citrixbleed-netscaler-memory-disclosure-exploited-post-disclosurehttps://runtimerebel.com/blog/citrixbleed-netscaler-memory-disclosure-exploited-post-disclosureCitrixBleed, a new vulnerability in NetScaler appliances, is being actively exploited using public PoC code to retrieve arbitrary memory content. Patch immediately.Fri, 03 Jul 2026 07:27:45 GMTCitrix BleedNetScalerArbitrary Memory ContentPoC ExploitationData Exfiltrationhttps://runtimerebel.com/blog/adobe-coldfusion-campaign-classic-critical-rce-patcheshttps://runtimerebel.com/blog/adobe-coldfusion-campaign-classic-critical-rce-patchesAdobe has released critical patches for ColdFusion and Campaign Classic, addressing seven vulnerabilities with 10/10 CVSS scores that allow remote code execution.Wed, 01 Jul 2026 13:05:53 GMTAdobe ColdFusionAdobe Campaign ClassicRCEVulnerabilityPatchCVSS 10 0https://runtimerebel.com/blog/oracle-ebs-over-900-instances-exposed-to-ongoing-attackshttps://runtimerebel.com/blog/oracle-ebs-over-900-instances-exposed-to-ongoing-attacksOver 900 Oracle E-Business Suite (EBS) instances are exposed online, facing ongoing attacks targeting a critical flaw. Learn the risks and mitigation steps.Wed, 01 Jul 2026 13:05:09 GMTOracle E Business SuiteEBSExposureCritical FlawEnterprise ApplicationsOngoing Attacks