High-Severity Remote Code Execution Vulnerability in WordPress Core Under Active Exploitation (CVE-2026-119977)

A WordPress Core flaw lets unauthenticated attackers execute code on the server during a Core upgrade. Attackers are already polling sites to catch the brief window before servers are broadly upgraded.

Nov 4, 2026 - 5 Min Read

Critical Remote Code Execution Vulnerability in the Linux Kernel TCP Stack (CVE-2026-98432)

A Linux kernel IPv4 TCP handshake handling vuln lets an unauthenticated, remote attacker corrupt kernel memory and potentially run commands as root, while several major distributions have not yet shipped fixed kernels.

Oct 30, 2026 - 6 Min Read

Critical Authentication Bypass Vulnerability in HPE Aruba Networking AOS-10 (CVE-2026-79844)

HPE has fixed a critical AOS-10 flaw that lets unauthenticated, remote attackers bypass authentication and execute code on Aruba Networking wireless infrastructure. It is one of eight critical flaws in a 72-vulnerability AOS release.

Oct 22, 2026 - 2 Min Read

Critical Remote Code Execution Vulnerability in Cisco Expressway Series (CVE-2026-76466)

A critical flaw in the database service of Cisco Expressway lets an unauthenticated, remote attacker run operating system commands as root on Expressway-C and Expressway-E devices.

Oct 21, 2026 - 3 Min Read

PHP2SHELL: Critical PHP RCE Flaws Threaten Web Infrastructure Amid Active Exploitation (CVE-2026-109618 & CVE-2026-109619)

Update 2 (October 25th, 2026) Attackers have obtained working shells on purposely exposed PHP honeypots. Trail of Bits reports a working exploit (not public) that works on stock WordPress, Laravel, MediaWiki and phpBB settings. Unit 42 attributes one compromise to PHP exploitation. Update 1 (October 23rd, 2026) Many attempts of mass exploitation attempts have been reported, PHP's patch appears successful, and additional mitigations have been validated. Weaponization of the attack remains limited to attackers targeting specific instances and generic exploitation requires memory grooming and specific PHP functionality enabled. Two critical PHP vulnerabilities dubbed "php2shell," allow unauthenticated remote code execution (RCE). Technical details and proof-of-concept (PoC) exploit code leaked from escrow ahead of coordinated disclosure, with researchers reporting active exploitation attempts in the wild.

Oct 20, 2026 - 11 Min Read