RCE — Cybersecurity News

Microsoft SCCM Vulnerability Chain Could Enable Remote SYSTEM-Level Code Execution

RedSide Security August 17, 2026 Vulnerability 92 views

Security researchers have disclosed an attack chain affecting Microsoft System Center Configuration Manager (SCCM) that could allow standard Active Directory users to ultimately execute malicious code with SYSTEM privileges on an SCCM primary site server. The chain combines an AdminService authorization flaw, weak signature validation, CAB path traversal, and unsafe DLL loading.

15-Year-Old NGINX Vulnerability (CVE-2026-42533) Enables Pre-Auth Remote Code Execution

RedSide Security July 20, 2026 CVE 123 views

A newly disclosed NGINX vulnerability, CVE-2026-42533, has reportedly been exploitable since 2011 and allows unauthenticated attackers to achieve remote code execution through a flaw in the NGINX script engine. The bug affects both NGINX Open Source and NGINX Plus and has now been patched in versions 1.30.4 and 1.31.3.

Critical "wp2shell" WordPress Core RCE Vulnerability Puts 500M+ Sites at Risk

RedSide Security July 18, 2026 Vulnerability 93 views

A critical WordPress Core vulnerability dubbed wp2shell allows unauthenticated attackers to achieve remote code execution on affected websites without requiring plugins or user credentials. WordPress has released emergency patches and is force-pushing updates to vulnerable installations worldwide.

F5 Discloses High-Severity NGINX Vulnerabilities, Including Potential RCE Flaw

RedSide Security July 16, 2026 Vulnerability 70 views

F5 has released patches for three vulnerabilities affecting NGINX Plus and NGINX Open Source, including a critical heap buffer overflow (CVE-2026-42533) that may enable remote code execution. Organizations using NGINX web servers, ingress controllers, or gateway products should patch immediately and review affected configurations.

cPanel & WHM Patches Three Vulnerabilities Including RCE and Privilege Escalation Flaws

RedSide Security May 09, 2026 CVE 132 views

Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

RedSide Security February 11, 2026 Vulnerability 164 views

Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package

RedSide Security February 04, 2026 Vulnerability 171 views

Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution

RedSide Security January 28, 2026 CVE 289 views

Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws

RedSide Security January 21, 2026 Vulnerability 224 views

100,000+ n8n Instances Exposed to Internet Vulnerable to RCE Attacks

RedSide Security January 13, 2026 CVE 208 views