Everything CloudSec Pulse has reported about remote code execution: 11 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in Microsoft SQL Server versions 2017 through 2022 allows authorized users to run code remotely, posing operational risks to businesses relying on these databases.
A high-severity vulnerability in Microsoft’s .NET WPF runtime enables attackers to run code over networks, requiring immediate updates for affected Windows applications.
A critical integer underflow bug in Windows PowerShell allows remote code execution, posing significant operational risk to organizations relying on the tool.
A heap overflow in Windows DNS Server allows remote code execution, posing a severe risk to organizations relying on Microsoft infrastructure.
A critical vulnerability in Omnispace Agora versions before 26.10.0 allows attackers to inject PHP code and execute commands without authentication during installation.
Attackers are actively exploiting a CVSS 10.0 vulnerability in Bricksforge to execute code on WordPress sites. Organizations using versions prior to 3.1.8.10 must verify their patch status immediately.
Command injection is a specific mechanism that leads to remote code execution, which is the broader outcome an attacker seeks to achieve.
Self-managed GitLab users must upgrade immediately to fix severe authorization and code execution flaws released in October 2026.
A zero-click vulnerability in AnyDesk Linux 8.0.2 allows unauthenticated remote code execution as root, requiring immediate updates to patched versions.
Horizon3.ai reports that CVE-2026-102489 in Zammad allows attackers to steal session cookies and potentially execute remote code through error messages.
A critical vulnerability in Cisco NX-OS allows unauthenticated remote code execution, forcing network admins to patch immediately to prevent full system compromise.