Vulnerabilities
Visual Studio Code Output Encoding Error Triggers RCE Threat in Versions Below 1.141.1
Unpatched Visual Studio Code installations risk remote code execution due to improper output encoding, rated high severity by NVD.
Remote Code Execution
Everything Packet Tribune has reported about Remote Code Execution: 10 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
.NET Framework Deserialization Flaw CVE-2026-70035 in WPF Components
Microsoft releases patches for a high-severity remote code execution vulnerability in .NET Framework WPF components involving untrusted data deserialization.
Vulnerabilities
Microsoft RPC Runtime Library Critical OOB Write Vulnerability Enables Remote Code Execution
A critical vulnerability in the RPC Runtime Library permits unauthorised attackers to execute code over a network via an out-of-bounds write.
Vulnerabilities
Printcart Store Arbitrary File Upload Flaw Enables Unauthenticated RCE on WooCommerce
An arbitrary file upload flaw in the Printcart Store plugin allows attackers to execute remote code on affected WooCommerce sites without authentication.
Vulnerabilities
Microsoft Failover Cluster Driver Double Free CVE-2026-96864 Enables Unauthenticated Remote Code Execution
A critical double free vulnerability in the Microsoft Failover Cluster Virtual Driver allows unauthenticated network attackers to execute arbitrary code.
Vulnerabilities
Adobe Commerce Template Injection Bug Grants Unauthenticated Remote Code Execution on Versions Through 2.4.9
A critical vulnerability in Adobe Commerce and Magento Open Source allows unauthenticated attackers to execute arbitrary code via template injection.
Vulnerabilities
NetEase Cloud Music Windows: Critical URL Injection Flaw CVE-2026-109422 Enables Local Binary Execution
A critical flaw in the Windows client allows attackers to execute local binaries by passing unvalidated URLs to the system shell.
Vulnerabilities
OpenSpug Remote Command Injection: Unpatched Critical CVE-2026-108540 Affects Versions 3.0-4.0.1 With No Vendor Fix
Attackers can execute arbitrary OS commands via OpenSpug’s file transfer endpoint, with no patch confirmed by the vendor for affected releases.
Vulnerabilities
NetScaler SAML Memory Overflow Flaw Triggers RCE or DoS on Identity Providers and Service Providers
A CVSS 9.5 vulnerability in NetScaler ADC and Gateway allows remote code execution or denial-of-service when SAML is configured, affecting multiple versions.
Vulnerabilities
IBM Guardium Path Traversal Flaw in v12.0-12.2 Lets Hackers Run Code With No Login
Unauthenticated attackers can exploit a path traversal flaw in IBM Guardium v12.0-12.2 to execute arbitrary code, posing severe risk.