#RCE

6 articles

F5 BIG-IP (CVE-2025-53521): reclassified as critical RCE, in-memory webshells

F5 reclassifies CVE-2025-53521 from DoS to critical RCE (CVSS 9.8) in March 2026. In-memory-only webshells deployed, attackers linked to China.

March 30, 2026

Vulnerabilities 2 min read

Ni8mare (CVE-2026-21858): CVSS 10.0 in n8n, 100,000 servers exposed

The Ni8mare vulnerability in n8n allows unauthenticated full server takeover. CVSS 10.0, 100,000 estimated vulnerable instances, 26,512 detected by Censys.

March 29, 2026

Vulnerabilities 2 min read

CVE-2026-32746 (GNU Telnetd): CVSS 9.8, unauthenticated root RCE on 3,362 hosts

Critical flaw in GNU InetUtils telnet daemon allows unauthenticated remote root code execution. 3,362 hosts directly exposed on the Internet.

March 28, 2026

Vulnerabilities 2 min read

PolyShell (Magento/Adobe Commerce): unauthenticated RCE, mass exploitation

PolyShell, a critical vulnerability in Magento and Adobe Commerce, allows unauthenticated file upload and execution. 50+ IPs actively scanning.

March 26, 2026

Vulnerabilities 2 min read

CVE-2026-21992 (Oracle Identity Manager): CVSS 9.8, unauthenticated RCE

Analysis of CVE-2026-21992, a critical Oracle Identity Manager vulnerability allowing unauthenticated remote code execution. Patch available.

March 24, 2026

Vulnerabilities 2 min read

CVE-2026-33017 (Langflow): CVSS 9.3, exploited within 20 hours

Technical analysis of CVE-2026-33017, a critical Langflow vulnerability allowing unauthenticated remote code execution. Exploited within 20 hours of disclosure.

March 23, 2026