Remote code execution
RCE: an attacker runs arbitrary code on a system over the network. Usually the most dangerous class of bug.
Advisories that mention this term
SAP November Patch Day fixes four CVSS 10.0 flaws letting unauthenticated attackers compromise NetWeaver and Web Dispatcher
SAP's November 10 Security Patch Day bulletin rates four flaws in ICM, Web Dispatcher, SAP Gateway and the SAML2 service provider (CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017) at CVSS 10.
Attacker exploits SGLang flaw to breach NEAR AI inference server, takes data on about 100 users and 18 AI agents
NEAR AI said in a November 9 incident report that an unauthorized party exploited a remote code execution flaw in SGLang, the open-source inference engine on its servers, ran code on one inference server, and then reached an internal system behind the deprecated Private Chat, downloading email addresses, names and some plan and balance details for about 100 users .
Researchers use default admin:admin console on ForgeRock servers to breach two automakers' identity systems, take over accounts and remotely unlock and start cars
Researchers Shubham Shah and Sam Curry disclosed on Nov 7 that in early 2026 they found a vulnerability chain giving them remote code execution on production ForgeRock servers handling customer logins for two unnamed automakers, letting them create a valid session for any customer account and locate, unlock and remotely start connected vehicles .
LiteLLM release pipeline compromised; version 1.107.0 on PyPI and Docker carried credential-stealing malware for about two hours
LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.
Node.js and Go Release Same-Day Emergency Security Updates: Brotli Decompression Can Lead to RCE; Go Blocks Compromised Intermediate Certificates
On October 22, the Administration for Cyber Security (ACS), MODA urged public and private sectors to accelerate patching: Node.