#rce — Public Fediverse posts

Critical RCE vulnerabilities patched in F5 NGINX & Juniper Junos OS — unauthenticated attackers could take full control via buffer overflows & memory corruption. No exploitation in the wild. Patch ASAP: https://radar.offseq.com/threat/f5-juniper-networks-patch-critical-vulnerabilities-85280fb8b973d5ad #OffSeq #infosec #RCE #networksecurity

CRITICAL: CVE-2026-103768 in ELEX WordPress HelpDesk (<=3.3.7) lets unauthenticated users upload dangerous files via initMailPart, risking remote code execution. Update or mitigate now. https://radar.offseq.com/threat/cve-2026-103768-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-elextensions-elex-wordpress-7d30032c4c181bd8 #OffSeq #WordPress #Infosec #RCE

CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access

Palo Alto Networks has released security updates addressing CVE-2026-0322, a high-severity remote code execution vulnerability affecting the management interface of PAN-OS. The flaw carries a CVSS 4.0 score of 8.6 and enables an authenticated attacker with network access to execute arbitrary code with root privileges on a vulnerable appliance/system. Palo Alto Networks disclosed the issue […] The post CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access appeared first on SOC Prime .

Pulse ID: 6ad0bfe0fe1ebf8f6b3f19c9
Pulse Link: https://otx.alienvault.com/pulse/6ad0bfe0fe1ebf8f6b3f19c9
Pulse Author: CyberHunter_NL
Created: 2026-10-15 11:58:24

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CVE20260322 #RCE #PaloAlto #OTX #CyberHunter_NL

CRITICAL: CVE-2026-108587 in 10Web Booster <=2.34.10 enables unauthenticated file upload (RCE via leaked REST nonce). Restrict wp-content/uploads & monitor uploads. Patch status pending. https://radar.offseq.com/threat/cve-2026-108587-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-10web-10web-booster-website-6312bf250c702c31 #OffSeq #WordPress #Vuln #RCE

Patch two high-severity SonicWall NSM On-Prem vulnerabilities (CVE-2026-96540, CVE-2026-100232) allowing admin privilege escalation and OS command RCE.

#SonicWall #CVE202696540 #CVE2026100232 #NetworkSecurity #RCE #Cybersecurity #InfoSec

https://securityonline.info/sonicwall-nsm-on-prem-vulnerabilities-snwlid-2026-0018/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-110858 | GitPython 3.1.30 – 3.2.0: CRITICAL RCE via improper argument neutralization in Remote.pull(). Attackers can run arbitrary OS commands over SSH/local. Limit use & watch for patches. https://radar.offseq.com/threat/cve-2026-110858-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-in-eb08373a6f0fb8af #OffSeq #GitPython #RCE #infosec

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

Pulse ID: 6ad016777a22b36655d161ff
Pulse Link: https://otx.alienvault.com/pulse/6ad016777a22b36655d161ff
Pulse Author: CyberHunter_NL
Created: 2026-10-14 23:55:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#PaloAlto #RCE #CVE20260322 #ZeroDay #OTX #CyberHunter_NL

Attackers are exploiting CVE-2026-76519 (CVSS 9.8), a critical Cisco Secure Email Gateway vulnerability allowing root RCE via attachments. Patch right now.

#CVE202676519 #Cisco #EmailSecurity #AsyncOS #RCE #ZeroDay #Cybersecurity

https://securityonline.info/cisco-secure-email-gateway-cve-2026-76519-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.

#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec

https://securityonline.info/palo-alto-pan-os-rce-cve-2026-0322-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.

#CVE202697229 #GitLab #RCE #DevSecOps #Cybersecurity #InfoSec #Vulnerability

https://securityonline.info/gitlab-rce-cve-2026-97229-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

It is 0 Days since it was #useafterfree #curl #RCE

Package : curl
CVE ID : CVE-2026-92392

#adminLive

CVE-2026-104800: CRITICAL RCE flaw in streetforce1 AGE-GATE WordPress plugin (≤1.0). Unauthenticated attackers can run arbitrary code via unsafe admin.php endpoint. Remove or restrict plugin use ASAP. https://radar.offseq.com/threat/cve-2026-104800-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-streetforce1-age-gate-02cdeee893e722b9 #OffSeq #WordPress #Vuln #RCE

A GitLab critical vulnerability, CVE-2026-97229, allows unauthenticated code execution. Update to 19.2.8, 19.3.5, or 19.4.2 now.

#GitLab #CVE202697229 #RCE #CICD #DevSecOps #Vulnerability #PatchNow #GitLabDuo

https://meterpreter.org/gitlab-critical-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

#CVE2026110447 #Nextcloud #CollaboraOnline #RCE #Webshell #Cybersecurity #InfoSec #354

https://securityonline.info/nextcloud-collabora-online-cve-2026-110447-exploited/?utm_source=mastodon&utm_medium=jetpack_social

PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.

#CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity

https://securityonline.info/cve-2026-103572-visual-studio-copilot-rce-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

An unpatched Shopware vulnerability, CVE-2026-104937, lets stored XSS steal admin tokens and lead to RCE in Shopware 6.7. Restrict media uploads now.

#Shopware #CVE2026104937 #StoredXSS #Ecommerce #CERTCC #RCE #Unpatched #CyberSecurity

https://securityonline.info/shopware-vulnerability-cve-2026-104937/?utm_source=mastodon&utm_medium=jetpack_social