CVE-2026-34926

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 22, 2026

Last Seen

July 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress72.9

A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as CVE-2026-63030 (REST API batch-route confusion) and CVE-2026-60137 (SQL injection). Exploita...

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching67.0

BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier...