… At the beginning of the year, vm2 was impacted by another critical sandbox escape flaw that could lead to arbitrary code execution on the underlying host system, tracked as CVE-2026-22709 . …
Microsoft fixes AutoGen Studio flaw that enabled code execution By Bill Toulas June 22, 2026 01:28 PM A vulnerability chain dubbed AutoJack in Microsoft’s AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system … …
Microsoft patches Exchange Server zero-day exploited in attacks By Sergiu Gatlan June 10, 2026 09:44 AM Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting XSS attacks targeting Outlook Web … …
… As a result, an attacker can close the intended string, inject arbitrary PHP code, and comment out the remaining generated code to achieve code execution on the server. …
… Claim Your Spot Related Articles: Ivanti fixes EPMM zero-days chained in code execution attacks Palo Alto Networks warns of firewall RCE zero-day exploited in attacks CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday Ivanti warns of two EPMM flaws exploited in zero-day attacks Palo Alt… …
… CVE-2026-34910 : an improper input validation flaw that enables an attacker to inject and execute arbitrary operating system commands, potentially leading to remote code execution and complete system takeover. …
New critical Exim mailer flaw allows remote code execution By Bill Toulas May 13, 2026 04:23 PM A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. …
… Download Now Related Articles: 18-year-old NGINX vulnerability allows DoS, potential RCE 13-year-old bug in ActiveMQ lets hackers remotely execute commands Max severity Flowise RCE vulnerability now exploited in attacks CISA: New Langflow flaw actively exploited to hijack AI workflows New critical … …
Microsoft warns of Exchange zero-day flaw exploited in attacks By Sergiu Gatlan May 15, 2026 05:40 AM On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting XSS whil… …
New Januscape Linux flaw allows VM escape on Intel, AMD devices By Sergiu Gatlan July 7, 2026 08:06 AM A 16-year-old Linux kernel vulnerability, dubbed Januscape , allows attackers to escape a virtual machine and execute arbitrary code on the host. …