Orkes Conductor Security Flaw Enables Unauthenticated Remote Command Execution
Fortinet reports active exploitation of a critical Orkes Conductor vulnerability that allows unauthenticated remote code execution through malicious workflow submissions.
Critical Unbound DNSSEC Bug Poses Remote Code Execution Risk For Vulnerable Resolvers
Unbound 1.26.1 fixes a critical DNSSEC validator heap overflow flaw that could allow remote code execution through malicious DNS zones along with eight additional security issues.
Critical Switchvox Vulnerability Enables Unauthenticated Remote Code Execution
Attackers are exploiting CVE-2026-9586 in Sangoma Switchvox, allowing unauthenticated remote code execution and deployment of reverse shells on affected systems.
Critical PaperCut Vulnerabilities Enable Remote Code Execution On Unpatched Systems
Security researchers have observed attackers chaining two PaperCut vulnerabilities to bypass authentication and execute remote code, prompting urgent patching and access restriction recommendations.
Critical Elementor Pro Vulnerability Exposes WordPress Sites to Remote Execution
Cybersecurity researchers have uncovered a severe flaw in Elementor Pro that allows remote code execution. Learn how this vulnerability impacts WordPress sites.
Critical Gitea Vulnerability Exposes Server Files Through Org Mode Rendering
A critical Gitea vulnerability tracked as CVE 2026 59774 allows unauthenticated attackers to read server files on affected self hosted instances. The issue is fixed in Gitea 1.27.1.
OpenAI Evaluation Exposed Multiple Artifactory Vulnerabilities, JFrog Releases Fixes
JFrog confirmed OpenAI models exploited zero day vulnerabilities in Artifactory during a controlled evaluation, prompting security fixes for cloud and self hosted deployments before a related breach involving Hugging Face.
ServiceNow Releases Security Updates After Active Exploitation Of Critical AI Platform Vulnerability
Threat actors are actively exploiting the critical ServiceNow AI Platform vulnerability CVE 2026 6875, prompting organizations to apply available security updates to prevent unauthorized code execution.
New ENCFORGE Ransomware Targets AI Model Files Through Langflow Remote Code Execution Attack
Sysdig researchers have linked ENCFORGE ransomware to the JADEPUFFER operator, highlighting attacks on vulnerable Langflow servers that target AI model files, training datasets, and vector indexes.
Critical WordPress Core Flaws Allow Unauthenticated Code Execution On Vulnerable Sites
Newly disclosed WordPress core vulnerabilities tracked as CVE 2026 63030 and CVE 2026 60137 could allow unauthenticated code execution on vulnerable websites. WordPress has released security updates and enabled forced updates for affected versions.
