Topic
Documented APIs that permit file access and command execution on hosts, functioning as RCE surfaces when exposed.
Next.js released versions 16.4.1 and 15.5.28 on October 14 to fix two unauthenticated code-execution flaws that Vercel rated CVSS 9.5. As of October 15 the caching flaw had no CVE and no workaround, so npm audit may stay quiet and only the upgrade closes it.
Reality
Drupal shipped fixes on October 14 for CVE-2026-108097, a critical Field UI remote code execution flaw, in 11.4.10, 11.3.19 and 10.6.19. The Security Team says core alone is not reachable, but contributed modules open several paths and at least one needs no login.
Reality
Attackers made 1,423 attempts against Previdian honeypots since September 19 to exploit Langflow CVE-2026-105740 (CVSS 9.9, versions before 1.9.0). In one sequence they got the required login with a common username and password, Previdian said.
Reality
GitLab has patched CVE-2026-90970, a CVSS 9.9 flaw that lets any authenticated Duo Agent Platform user run arbitrary commands on the AI Gateway server. Fixed releases are 19.2.4, 19.3.2 and 19.4.1 for self-hosted installs.
Reality
CISA added Kestra's CVE-2026-49869 to its known-exploited catalog on September 2 at CVSS 10.0, after an auth-filter bug let unauthenticated callers run commands as root. Teams on affected Kestra OSS builds should upgrade to 1.0.45 or 1.3.21.
Reality
Artifex fixed Ghostscript CVE-2026-39919 in 10.08.0 on September 8, closing a heap overflow present in versions 9.21 through 10.07.1. Wordfence, which found the flaw, has seen no exploitation in the wild yet.
Reality
CERT/CC rates Thelia 2.6.0 and 2.6.1 critical for multiple admin-reachable paths to remote code execution. No vendor patch is available, so each shop has to limit its own exposure.
Reality
Satori, the JSX-to-SVG step behind Next.js next/og, put external input into SVG unescaped, per a dev.to explainer of CVE-2026-94545. The explainer says code execution would need the injected SVG to corrupt memory in a native parser, while SSRF needs only the injection.
Reality
GitLab fixed CVE-2026-97229, a maximum-severity flaw that could let remote attackers run code, in releases 19.2.8, 19.3.4 and 19.4.2. GitLab.com already runs the fix and Dedicated customers need do nothing, so the work falls on self-managed operators.
Perspective Coverage
7 publishersReality
Attackers are exploiting Zimbra Collaboration Suite flaw CVE-2026-73570, which Synacor fixed quietly in 10.1.20 on July 20 and disclosed on August 13. An upgrade closes the injection path, but a web shell written earlier stays on disk until someone finds it.
Reality
Attackers are exploiting CVE-2026-85097, a CVSS 10.0 unauthenticated upload flaw in the Bricksforge WordPress plugin, Patchstack reported. Versions through 3.1.8.9 are affected; 3.1.8.10 is the first fixed build.
Perspective Coverage
3 publishersReality
Kestra's AuthenticationFilter skips authentication for any request path ending in "/configs", letting an unauthenticated attacker reach root remote code execution. Naming a flow "configs" is enough, because the REST API puts the flow name in the path. The bug is CVE-2026-49869.
Reality
nginx-ui 2.3.8 up to 2.5.0 lets an authenticated admin run commands on the proxy host through a forged backup restore, a flaw rated 9.4 on CVSSv4. The same access reaches certificate private keys, proxy routing and database credentials, so a console login is effectively host-level access.
Reality
Citrix urged NetScaler customers to patch CVE-2026-107406, a memory overflow that allows remote code execution on appliances set up as SAML IdP or SP. The company says it knows of no attacks so far, on a product line where it has patched exploited zero-days twice in recent weeks.
Perspective Coverage
5 publishersReality
PaperCut flaws tracked under three CVEs chain into code execution before login, according to an analysis published on dev.to. No credentials are needed, so any host that can send the server a print job is within reach of the chain until fixed builds are confirmed.
Reality
CVE-2026-93485 was fixed on September 17 in WordPress 7.1.1. An anonymous comment plants a script, an administrator opens the page, and the script uploads a plugin carrying a web shell. Affected versions go back to 4.7.
Perspective Coverage
5 publishersReality
Kiteworks fixed CVE-2026-54154, a CVSS 10.0 flaw letting unauthenticated attackers run code on its Email Protection Gateway, in version 9.4.1. Other EPG flaws disclosed the same day are fixed only in 9.5.1, so internet-facing gateways should go straight to that release.
Reality
CVE-2026-6951 reopens remote code execution in simple-git, a library downloaded 8.7 million times a week, by respelling the blocked -c flag as --config. The 2022 patch never checked the long form, so the same attack works wherever untrusted input reaches a git call.
Reality
Unsloth fixed Studio in version 2026.6.9 after Pillar Security showed that reading a malicious model's config.json could run an attacker's Python code. Unsloth disputed parts of the finding and declined to publish an advisory, so no CVE was assigned.
Reality
CISA says an integer underflow in MikroTik RouterOS web management gives an unauthenticated attacker root with one crafted request on versions below 7.24. No exploitation has been reported, but MikroTik's fix advice sets a 7.23 floor that CISA's own affected range still covers.
Perspective Coverage
3 publishersReality
Security · August 19, 2026 · Confirmed4 publishers
Security · August 27, 2026 · Confirmed2 publishers
Security · August 28, 2026 · Confirmed7 publishers
Security · August 29, 2026 · Confirmed4 publishers
Security · August 28, 2026 · Confirmed3 publishers
Security · September 3, 2026 · Confirmed3 publishers
Security · September 4, 2026 · Confirmed4 publishers
Security · September 7, 2026 · Confirmed2 publishers
Security · September 11, 2026 · Confirmed3 publishers
Security · September 16, 2026 · Confirmed2 publishers
Security · September 21, 2026 · Confirmed2 publishers