CVE Cybersecurity News

Adobe ColdFusion Critical Vulnerabilities Enable Unauthenticated Remote Code Execution

RedSide Security August 12, 2026 CVE 106 views

Adobe has released urgent security updates for ColdFusion 2025 and 2023, fixing multiple critical vulnerabilities including a CVSS 10.0 unauthenticated OS command injection flaw that could enable remote code execution and full server compromise. Organizations should patch exposed ColdFusion deployments immediately.

Cybersecurity Information Security Vulnerability Management Threat Intelligence Enterprise Security Application Security Remote Code Execution Web Security Security Updates

Continue reading: Adobe ColdFusion Critical Vulnerabilities Enable U…

15-Year-Old NGINX Vulnerability (CVE-2026-42533) Enables Pre-Auth Remote Code Execution

RedSide Security July 20, 2026 CVE 123 views

A newly disclosed NGINX vulnerability, CVE-2026-42533, has reportedly been exploitable since 2011 and allows unauthenticated attackers to achieve remote code execution through a flaw in the NGINX script engine. The bug affects both NGINX Open Source and NGINX Plus and has now been patched in versions 1.30.4 and 1.31.3.

Cybersecurity RCE F5 Linux Security Vulnerability Management Memory Corruption Remote Code Execution NGINX NGINX Plus CVE-2026-42533 Heap Buffer Overflow Information Disclosure Web Server Security ASLR Bypass NGINX Security

Continue reading: 15-Year-Old NGINX Vulnerability (CVE-2026-42533) E…

Critical Linux Kernel Flaw Allows Unprivileged Users to Gain Root Access

RedSide Security June 28, 2026 CVE 131 views

Critical Linux kernel vulnerability CVE-2026-46331 allows unprivileged users to gain root access by exploiting a page-cache corruption flaw in the net/sched act_pedit subsystem. The issue affects Linux kernels 5.18 through 7.1-rc6 and has been successfully demonstrated against RHEL, Debian, and Ubuntu systems.

cybersecurity vulnerability patching alerts exploitation privilege escalation CVE threat actors Linux exploit news

Continue reading: Critical Linux Kernel Flaw Allows Unprivileged Use…

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

RedSide Security May 27, 2026 CVE 162 views

cybersecurity infosec vulnerability patching hardening authentication authorization alerts exploitation malware phishing exploit threat-actors news monitoring attack-prevention privilege-escalation endpoint-security-threat-intelligence cve rce data-breach microsoft sharepoint windows security-operations

Continue reading: Microsoft Patches SharePoint RCE Flaw CVE-2026-456…

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

RedSide Security May 17, 2026 CVE 167 views

A critical NGINX vulnerability tracked as CVE-2026-42945 is now being actively exploited in the wild, just days after public disclosure. The flaw allows attackers to crash NGINX worker processes and potentially achieve remote code execution under specific conditions. At the same time, threat actors have also begun weaponizing multiple critical vulnerabilities in openDCIM to deploy PHP web shells and gain remote access to exposed systems.

cybersecurity infosec vulnerability patching hardening alerts exploitation malware exploit threat-actors news monitoring attack-prevention endpoint-security-threat-intelligence nginx cve rce opensource linux threat-detection

Continue reading: NGINX CVE-2026-42945 Exploited in the Wild, Causin…

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

RedSide Security May 10, 2026 CVE 125 views

A newly disclosed Linux kernel vulnerability chain, dubbed **Dirty Frag**, enables unprivileged local users to gain root access across major Linux distributions. The flaw combines two page-cache write issues in the xfrm-ESP and RxRPC subsystems, creating a deterministic and highly reliable privilege escalation method. Limited in-the-wild exploitation has already been observed, with attackers using it in post-SSH compromise scenarios.

cybersecurity vulnerability exploitation privilege escalation Linux

Continue reading: Linux Kernel Dirty Frag LPE Exploit Enables Root A…