CWE-94 - Code Injection - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  30 articles · Updated July 15, 2026
• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  33 articles · Updated June 17, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGate

  DbGate's JSON script runner has a critical vulnerability (CVE-2026-47668) that allows unauthenticated remote code execution via the functionName parameter in JSON script assign commands. The vulnerability arises from…

  2 articles · Updated June 6, 2026
• Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks

  A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe…

  2 articles · Updated June 26, 2026
• New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

  Forescout Technologies has identified 22 new vulnerabilities in serial-to-IP converters from Lantronix and Silex, which are widely used in critical sectors like healthcare and utilities. These vulnerabilities,…

  9 articles · Updated April 21, 2026
• Armored Likho APT Targets Power Grids with BusySnake Stealer Malware

  A newly identified APT group, Armored Likho, is conducting a phishing campaign targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group employs a sophisticated infostealer…

  7 articles · Updated July 4, 2026
• ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

  A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability…

  65 articles · Updated June 11, 2026
• Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

  Void Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as the 'Contagious Interview,' targets…

  22 articles · Updated April 22, 2026
• Belgian State Security and Organizations Targeted by Cyberattacks

  Between May 2025 and Spring 2026, the Belgian State Security experienced a data breach exposing employee information, attributed to vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM). Hackers exploited flaws…

  5 articles · Updated June 23, 2026

Recent Intelligence Reports

• Hugging Face Agentic Attacker Ai Breach 2026 — www.waxell.ai · July 20, 2026
• AI — Rescana · July 20, 2026
• "Wp2shell: Critical WordPress Gap Allows Code Insertion via API — www.heise.de · July 19, 2026
• Blog — oversecured.com · July 18, 2026
• Hugging Face Confirms AI-Driven Breach: Attackers used Autonomous Agents, defenders countered with AI — Cybersecuritynews · July 18, 2026
• Cursor 0day When Full Disclosure Becomes The Only Protection Left — mindgard.ai · July 18, 2026
• CVE-2026-15410 — nvd.nist.gov · July 17, 2026
• Lethal Trifecta — simonwillison.net · July 17, 2026

Related Entities