55
Search: “Applied Systems Engineering”
1,074 stories
55
60
60
55
60
60
60
55
60
55
60
60
60
60
60
60
55
55
55
60
60
60
Microsoft Releases Patches For Critical Windows TCP/IP and Other Bugs
60
60
60
55
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE
60
60
60
55
55
60
55
55
55
63 New Flaws (Including 0
60
60
60
"WP2Shell" Critical WordPress RCE Chain (CVE-2026-63030 & CVE-2026-60137)
CISA added the WordPress core pre-auth RCE chain (CVE-2026-63030, CVE-2026-60137) to KEV after confirmed exploitation; WordPress 6.9.5 and 7.0.2 fix the flaws.
On July 17, 2026 WordPress disclosed CVE-2026-63030, a REST API route-confusion flaw, and CVE-2026-60137, a SQL injection in WP_Query, which chain to unauthenticated remote code execution on default installs of WordPress 6.9.0-6.9.4 and 7.0.0-7.0.1. CISA has added both to the Known Exploited Vulnerabilities Catalog and active exploitation is confirmed. Cloudflare deployed WAF rules at 17:03 UTC on July 17, and patches are available in WordPress 6.9.5 and 7.0.2.
92