Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#code-injection — news, CVEs and analysis · ZeroHour

07:57 UTC· 5m ago

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#code-injection

3 stories this week · 14 this month · 20 in 6 months · mostly security

stories per day · 30 days

Related#rce 5 #apache 3 #apache-syncope 2 #camel-k 2 #cisa 2 #git 2 #gitea 2 #groovy 2 #kubernetes 2 #sandbox-escape 2 #self-hosted 2 #sharepoint 2 #sql-injection 2 #zdi 2 #0day 1 #active-exploitation 1 #ai-database 1 #argument-injection 1

20 stories, newest first · one card per story

CISA Advisories·1d ago high

CISA Adds Two Known Exploited Vulnerabilities to Catalog

#cisa #kev #sharepoint

CVE-2026-65660

in the wild

Canadian Centre for Cyber Security·2d ago critical

AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660

#sharepoint #microsoft #cve-2026-65660

4 sources in the wild 3 min1

CISA Advisories·2d ago

Siemens Desigo CC family

#siemens #desigo-cc #cve-2026-34223

CVE-2026-34223

5 sources 4 min

Cyber Security News·10d ago

Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls

#apache-syncope #code-injection #groovy

3 min3

ZDI Published Advisories·11d ago

ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

#0day #ai-database #code-injection

CVE-2026-92207

oss-security·12d ago high

CVE-2026-77147: Apache Syncope: Groovy Sandbox escape for empty CommandArgs

#apache-syncope #code-injection #cve-2026-77147

CVE-2026-77147

oss-security·14d ago

[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090

#argument-injection #code-injection #command-injection

Vulnerability

oss-security·16d ago high

CVE-2026-80352: Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

#apache #camel-k #code-injection

CVE-2026-80352

oss-security·18d ago high

CVE-2026-41870: Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

#apache #code-injection #jexl

CVE-2026-41870

Web discovery (articles for new exploits & KEV entries)·18d ago high

Emerging Threat: (CVE-2026-60004) Gitea Remote Code Execution via ...

#code-injection #cwe-94 #git

CVE-2026-60004

6 min1

ZDI Published Advisories·19d ago

ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability

#code-injection #koha #open-source

CVE-2026-19780

1

The Hacker News·29d ago high

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

#code-injection #patching #privilege-escalation

in the wild 4 min

Web discovery (articles for new exploits & KEV entries)·29d ago high

Over 8,300 Gitea servers vulnerable to code execution attacks

#code-injection #cve-2026-60004 #exploitation

CVE-2026-60004

in the wild1

The Hacker News·Aug 25, 2026 high

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

#code-injection #cve-2026-75149 #marimo

2 min

ZDI Published Advisories·Aug 24, 2026

ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability

#code-injection #megatron-bridge #nvidia

CVE-2026-24251

The Hacker News·Aug 21, 2026 critical

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

#active-exploitation #code-injection #cve-2026-19478

in the wild 2 min1

Help Net Security·Aug 18, 2026 high

Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)

#code-injection #csrf #gitlab

1

ZDI Published Advisories·Aug 11, 2026

ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

#ai-tooling #code-injection #flowise

CVE-2026-69256

1

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

#airtable-agent #code-injection #flowise

CVE-2026-69264

CERT-EU Advisories·Jan 30, 2026 high

2026-001: Critical vulnerabilities in Ivanti EPMM

#ivanti #epmm #endpoint-manager-mobile

in the wild