#Remote Code Execution
Actively exploited UniFi OS flaws turn network controllers into root-level targets
Actively exploited UniFi OS flaws turn network controllers into root-level targets CISA has added three Ubiquiti UniFi OS vulnerabilities to its Known Exploited...
Lucas Oliveira
Research
Splunk Enterprise CVE-2026-20253 hits KEV as exploitation begins
Splunk Enterprise CVE-2026-20253 hits KEV as exploitation begins Splunk's June 18, 2026 advisory update changed CVE-2026-20253 from a patch-now issue into an ac...
Lucas Oliveira
Research
Joomla JCE exploitation forces defenders beyond simple patching
Joomla JCE exploitation forces defenders beyond simple patching On Friday, June 19, 2026, defenders running Joomla sites with the JCE editor are at a deadline,...
Lucas Oliveira
Research
Veeam CVE-2026-44963 puts domain-joined backup servers at RCE risk
Veeam CVE-2026-44963 puts domain-joined backup servers at RCE risk Veeam has patched CVE-2026-44963, a critical [vulnerability](https://invaders.ie/resources/gl...
Lucas Oliveira
Research
Oracle PeopleSoft alert follows breach claims at 100+ organizations
Oracle PeopleSoft alert follows breach claims at 100+ organizations Claims of mass compromise across Oracle PeopleSoft environments were already serious on June...
Lucas Oliveira
Research
CVE-2026-45247: Mirasvit Cache Warmer RCE Threatens Magento Stores
CVE-2026-45247: Mirasvit Cache Warmer RCE Threatens Magento Stores Executive Summary CVE-2026-45247 is a critical [vulnerability](https://invaders.ie/resources/...
Lucas Oliveira
Research
Drupal PostgreSQL SQLi shows how SELECT-only injection becomes RCE
Drupal PostgreSQL SQLi shows how SELECT-only injection becomes RCE Lexfo's May 26, 2026 write-up on CVE-2026-9082 matters because it breaks a common defensive a...
Lucas Oliveira
Research
Unfixed Gogs flaw can turn pull requests into server-side RCE
Unfixed Gogs flaw can turn pull requests into server-side RCE A newly disclosed Gogs bug matters because it blurs the line between "authenticated" and "practica...
Lucas Oliveira
Research
Microsoft MDASH surfaces 16 Windows network flaws defenders should patch first
Microsoft MDASH surfaces 16 Windows network flaws defenders should patch first Microsoft's May 12, 2026 security disclosures included a point that deserves more...
Lucas Oliveira
Research
CVE-2026-45829: ChromaDB Pre-Auth RCE Risk in AI Stacks
CVE-2026-45829: ChromaDB Pre-Auth RCE Risk in AI Stacks | 2026 Executive Summary CVE-2026-45829 is a critical ChromaDB flaw that can let unauthenticated attacke...
Lucas Oliveira
Research
CVE-2026-42945 makes NGINX rewrite chains a live patch priority
CVE-2026-42945 makes NGINX rewrite chains a live patch priority CVE-2026-42945 has moved from fresh disclosure to active exploitation in days, which is exactly...
Lucas Oliveira
Research
Exim BDAT flaw makes mail servers urgent RCE patch targets
Exim BDAT flaw makes mail servers urgent RCE patch targets CVE-2026-45185 is the kind of bug that forces defenders to remember an old lesson: email infrastructu...
Lucas Oliveira
Research