Vulnerabilities
Block TCF Servlet Access to Stop Oracle EBS Remote Code Execution
Horizon3 researchers found an unauthenticated SQL injection in Oracle E-Business Suite that allows attackers to run commands on application servers without logging in.
Remote Code Execution
Everything BlueTeam Herald has reported about Remote Code Execution: 7 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch Advantech ADAM-3600 to Stop Critical Remote Command Execution
An unpatched firmware flaw allows attackers to forge packets and run commands with full privileges on exposed industrial modules.
Vulnerabilities
Block Unauthenticated Access to Piflow DeepAgents Chat Endpoints Now
Piflow 2.0.0 and 2.0.1 allow unauthenticated remote code execution via chat agents, risking credential theft.
Vulnerabilities
Update Semaphore UI to Mitigate CVE-2026-112305 RCE Vulnerability Affecting Task Runners and Server Secrets
A high-severity flaw in Semaphore UI allows task runners to execute arbitrary code by overriding Ansible variables, exposing server-side secrets and keys.
Vulnerabilities
Update Archon AI 0.2.13-0.11.1 Now to Fix CVE-2026-111322 Critical Host Command Execution Vulnerability
A critical flaw in Archon AI versions 0.2.13 through 0.11.1 lets attackers run host commands without authentication via an exposed API.
Vulnerabilities
Patch GitLab CE and EE to Block Unauthenticated Remote Code Execution
A critical flaw in GitLab CI/CD allows unauthenticated attackers to run arbitrary code. Self-managed users must upgrade immediately to mitigate this severe risk.
Vulnerabilities
Patch Nginx UI 2.5.0: Backup Restore Flaw Lets Admins Run Arbitrary Code via Config Overwrite
An authenticated admin can execute arbitrary code on Nginx UI servers via a backup restore flaw fixed in version 2.5.0.