SecNews

TAG

#rce

今天

  1. CERT/CC Vulnerability Notes

    VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

    CVE-2026-103521CVE-2026-103522rcexss

    Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution (RCE), server-side template injection (SSTI), stored and reflected cross-site scripting (XSS), unauthorized URL redirection, and other risks that expose both server-side and client-side attack surfaces. Description Thelia is an open-source e-commerce platform designed to provide merchants with customizable online storefronts, product management workflows, and administrative functionalities. It utilizes the Smarty template engine and provides administrators with broad control over templates, content, and modules. CVE-2026-103521 In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attacker with administrative Thelia permissions can exploit this vulnerability to upload arbitrary executable files, such as malicious PHP scripts, to achieve remote code execution on the underlying server. CVE-2026-103522 In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client-supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the underlying server. CVE-2026-1

  2. The Hacker News

    Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

    CVE-2026-85097exploitrce

    A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

10月9日周五

10月8日周四

  1. Cisco Security Advisories

    Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

    CVE-2026-76471exploitrce

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of October 7, 2026, Security Advisories. For further documentation of improvements and fixes in Cisco NX-OS Software, see Cisco NX-OS Software Security Hardening Release: October 2026. <br/>Security Impact Rating: Critical <br/>CVE: CVE-2026-76471

10月7日周三

  1. Cisco Security Advisories

    Cisco Advance Notification for Publication of October 7, 2026, Security Advisories

    CVE-2026-76455CVE-2026-76456CVE-2026-76457+1rce

    On October 7, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate the vulnerabilities that were disclosed on October 7, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery. Cisco NX-OS Software Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco NX-OS Software Security Hardening Release: October 2026 CVE-2026-76455CVE-2026-76456CVE-2026-76457CVE-2026-76459CVE-2026-76458CVE-2026-76453 Critical 9.8 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability CVE-2026-76465 Critical 9.8 Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities CVE-2026-76485CVE-2026-76486CVE-2026-76501 Critical 9.8 Cisco NX-OS Software NX-API Remote Code Execution Vulnerability CVE-2026-76471 Critical 9.8 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability CVE-2026-20038 Medium 5.8 Cisco NX-OS Software Control Plane Denial of Service Vulnerability CVE-2026-20173 Medium 5.8 Cisco NX-OS Software Python Sandbox Escape Vulnerability CVE-2026-20032 Medium 4.4 Cisco Application Policy Infrastructure Controller Cisco Security Advisory CVE ID

  2. Cisco Security Advisories

    Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

    CVE-2026-76465exploitrce

    A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-moam-rce-uBTzYV7 This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of October 7, 2026, Security Advisories. For further documentation of improvements and fixes in Cisco NX-OS Software, see Cisco NX-OS Software Security Hardening Release: October 2026. <br/>Security Impact Rating: Critical <br/>CVE: CVE-2026-76465

9月30日周三

  1. Zero Day Initiative

    ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability

    CVE-2026-13046exploitrce

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. An attacker must first obtain the ability to write to the samld session directory on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-13046.

9月23日周三

8月28日周五

  1. Tenable Security Advisories

    [R1] Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1

    CVE-2026-19626CVE-2026-19628CVE-2026-19629+1rce

    [R1] Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1 Arnie Cabral Fri, 08/28/2026 - 12:01 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below.ComponentCVE ID Severity CVSS v3 BaseCVSS v3 Temporal CVSS v3 VectorRemote Code ExecutionCVE-2026-19626Critical9.98.9AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:COS Command InjectionCVE-2026-19628High7.26.5AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CPrivilege EscalationCVE-2026-19629High8.17.3AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:CLocal Privilege EscalationCVE-2026-19635High8.87.9AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:CNote: These vulnerabilities were previously addressed in Tenable Enclave Security 1.9.0, which includes Tenable Security Center 6.9.0.

8月27日周四

  1. Tenable Security Advisories

    [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1

    CVE-2026-19626CVE-2026-19628CVE-2026-19629+1rce

    [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1 Arnie Cabral Thu, 08/27/2026 - 13:05 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. ComponentCVE ID Severity CVSS v3 BaseCVSS v3 Temporal CVSS v3 VectorRemote Code ExecutionCVE-2026-19626Critical9.98.9AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:COS Command InjectionCVE-2026-19628High7.26.5AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CPrivilege EscalationCVE-2026-19629High8.17.3AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:CLocal Privilege EscalationCVE-2026-19635High8.87.9AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Note: These vulnerabilities were previously addressed in Tenable Security Center 6.9.0.

8月5日周二

  1. 腾讯玄武实验室

    玄武在BlackHat揭示劫持智能体达成RCE的新方法

    rce

    Author: Jiashuo Liang and Guancheng Li of Tencent Xuanwu Lab 0x00 前言大语言模型（LLM）正在从简单的对话工具演化为能够编写代码、操作浏览器、执行系统命令的智能体。随着大模型应用的演进，提示词注入攻击的威胁也在不断升级。 设想这样一个场景：你让AI助手帮你编写代码，它却突然开始执行恶意指令，控制了你的电脑。这种看似科幻的情节，如今正在变为现实。 本文将介绍一种新型的提示词注入攻击范式。攻击者只需掌握一套“通用触发器”，就能精确控制大模型输出任意攻击者指定的内容，从而利用AI智能体实现远程代码执行等高风险操作。