Everything Patch Review has reported about Remote Code Execution: 6 stories, newest first. Part of our Vulnerabilities coverage.
Microsoft rates CVE-2026-102238 as critical because path traversal in older VS Code versions allows unauthorized remote code execution over a network.
A critical authorization flaw in Adobe Commerce and Magento Open Source allows remote attackers to run code without any user interaction.
D-Link DCS-930L cameras on firmware B1.08B4 face a critical remote flaw allowing unauthorized firmware updates via signature verification failure.
A critical flaw in Wazuh allows cluster workers to overwrite master configs. Versions before 4.14.8 are affected. Teams must patch to prevent root access.
A critical flaw in Perforce Helix Authentication Service allows attackers to execute code remotely if default tokens remain unchanged.
IBM Guardium versions 12.0 through 12.2 contain a critical vulnerability that lets attackers run arbitrary code remotely via path traversal.