Everything Firewall Chronicle has reported about remote code execution: 11 stories, newest first. Part of our Vulnerabilities coverage.
Authenticated HTTP requests targeting the static_dns1 parameter in Totolink X2000R firmware can trigger critical stack-based buffer overflows and arbitrary code execution.
A high-severity flaw in Adobe Acrobat for Edge lets attackers run code via malicious files, requiring user interaction to trigger the exploit.
Missing authentication on Cognition's REST endpoints allows attackers to run shell commands as the server process in versions prior to 0.13.0.
A critical code injection flaw in SGLang versions up to 0.5.22 allows unauthenticated attackers to execute arbitrary Python code via the scheduler process.
Drupal patches a critical remote code execution flaw in the Field UI module. Exploitation requires specific contributed modules, but no-login paths exist.
Vercel patches critical remote code execution bugs in Next.js image processing and caching components, urging immediate updates for all production deployments.
Microsoft patches a high-severity remote code execution flaw in .NET WPF that lets attackers bypass URI restrictions through crafted hyperlinks.
An unauthenticated flaw in Xorbits Xoscar allows attackers to run arbitrary code via crafted data on TCP channels before message validation occurs.
Firmware 1.0.0.4.003 allows remote attackers to inject OS commands through IPv6 settings. No vendor patch exists for this critical flaw.
A critical vulnerability in Wizarr Server allows authenticated users to execute arbitrary code and steal secrets before version 2026.9.1.
A critical vulnerability in Dromara Skyeye allows unauthenticated attackers to execute arbitrary code on executor hosts via exposed job scheduling endpoints.