vulnerabilityvia Microsoft Security Update Guide
CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
Oct 25, 2026 UTC
Security news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8...
Oct 23, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.
Oct 22, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
FreePBX 17.0.2 - Remote Code Execution (RCE)
Sep 3, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Metabase 0.61.0 - Authenticated Remote Code Execution
Sep 3, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution
Ghost_CMS 6.19.0 - Remote Code Execution
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Aug 31, 2026 UTC
vulnerabilityvia CSO Online
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...
Oct 27, 2026 UTC