CWE-94 - Code Injection - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  27 articles · Updated July 15, 2026
• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  30 articles · Updated June 17, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGate

  DbGate's JSON script runner has a critical vulnerability (CVE-2026-47668) that allows unauthenticated remote code execution via the functionName parameter in JSON script assign commands. The vulnerability arises from…

  2 articles · Updated June 6, 2026
• Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks

  A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…

  2 articles · Updated June 26, 2026
• New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

  Forescout Technologies has identified 22 new vulnerabilities in serial-to-IP converters from Lantronix and Silex, which are widely used in critical sectors like healthcare and utilities. These vulnerabilities,…

  9 articles · Updated April 21, 2026
• Critical CVE-2026-8206 Flaw in Kirki Plugin Exposes 500,000 WordPress Sites to Attacks

  A critical vulnerability (CVE-2026-8206) in the Kirki WordPress plugin allows unauthenticated attackers to hijack user accounts, including admin accounts, on over 500,000 websites. Detected by Defiant's Wordfence…

  36 articles · Updated June 3, 2026
• Armored Likho APT Targets Power Grids with BusySnake Stealer Malware

  A newly identified APT group, Armored Likho, is conducting a phishing campaign targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group employs a sophisticated infostealer…

  7 articles · Updated July 4, 2026
• ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

  A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability…

  65 articles · Updated June 11, 2026
• Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

  Void Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as the 'Contagious Interview,' targets…

  22 articles · Updated April 22, 2026

Recent Intelligence Reports

• CVE-2026-15410 — nvd.nist.gov · July 17, 2026
• Cursor 0day When Full Disclosure Becomes The Only Protection Left — mindgard.ai · July 17, 2026
• Lethal Trifecta — simonwillison.net · July 17, 2026
• VMware Avi Load Balancer: Critical vulnerability allows bypassing login — Heise.De · July 17, 2026
• OpenAI develops GPT — Feeds.4Sysops · July 16, 2026
• Cursor AI vulnerability allows automatic code execution from malicious repositories — Feeds.4Sysops · July 15, 2026
• CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero — Tenable · July 15, 2026
• New bugs in Claude for Chrome allow extensions to abuse AI privileges — Csoonline · July 15, 2026

Related Entities