This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2047.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2048.
Exploitation attempts target CVE-2026-1731, a critical unauthenticated remote code execution flaw in BeyondTrust Remote Support. The post BeyondTrust Vulnerability Targeted by Hackers Within 24 Hours of PoC Release appeared first on SecurityWeek .
It also fixed a high-severity authentication bypass that could be exploited remotely without authentication to obtain credentials. The post Ivanti Patches Endpoint Manager Vulnerabilities Disclosed in October 2025 appeared first on SecurityWeek .
A critical remote code execution (RCE) vulnerability has been discovered in BeyondTrust's Remote Support (RS) and Privilege Remote Access (PRA) products. This flaw allows unauthenticated attackers to execute arbitrary code remotely by sending specially crafted requests. No user interaction or authentication is required, making exploitation straightforward if the vulnerable services are exposed. BeyondTrust has released patches to address this issue, but no known exploits are currently observed in the wild. European organizations using BeyondTrust RS or PRA should prioritize patching to prevent potential compromise. The vulnerability poses a severe risk to confidentiality, integrity, and availability of affected systems. Attackers exploiting this flaw could gain full control over impacted systems, potentially leading to data breaches or lateral movement within networks. Countries with significant adoption of BeyondTrust products and critical infrastructure relying on privileged access management are at higher risk. Immediate mitigation and monitoring are essential to reduce exposure.
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests. The post Critical SmarterMail Vulnerability Exploited in Ransomware Attacks appeared first on SecurityWeek .
The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration. The post Vulnerabilities Allowed Full Compromise of Google Looker Instances appeared first on SecurityWeek .
The critical-severity SolarWinds Web Help Desk flaw could lead to unauthenticated remote code execution. The post Fresh SolarWinds Vulnerability Exploited in Attacks appeared first on SecurityWeek .
OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks. The post Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant appeared first on SecurityWeek .
MicroWorld Technologies, the maker of eScan antivirus, experienced a supply-chain compromise where malicious updates were pushed through the legitimate eScan updater. This multi-stage malware establishes persistence on infected systems, enables remote access for attackers, and blocks automatic security mechanisms. Although no known exploits are currently observed in the wild, the threat poses a medium severity risk due to its potential impact on confidentiality, integrity, and availability. European organizations using eScan antivirus are at risk, especially those in countries with higher adoption of this product. The attack leverages trusted update channels, making detection and prevention more challenging. Mitigation requires immediate verification of update integrity, network monitoring for unusual remote access, and enhanced endpoint detection capabilities. Countries with significant use of eScan and strategic sectors reliant on this antivirus are more likely to be targeted. The threat underscores the critical risk of supply-chain attacks in cybersecurity defenses.
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely. The post Ivanti Patches Exploited EPMM Zero-Days appeared first on SecurityWeek .
The two bugs impacted n8n’s sandbox mechanism and could be exploited via weaknesses in the AST sanitization logic. The post N8n Vulnerabilities Could Lead to Remote Code Execution appeared first on SecurityWeek .
The four critical flaws could be exploited without authentication for remote code execution or authentication bypass. The post SolarWinds Patches Critical Web Help Desk Vulnerabilities appeared first on SecurityWeek .
A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm. The post High-Severity Remote Code Execution Vulnerability Patched in OpenSSL appeared first on SecurityWeek .
The critical-severity vulnerability can be exploited via crafted network packets for remote code execution. The post 2024 VMware Flaw Now in Attackers’ Crosshairs appeared first on SecurityWeek .
