Meta fairseq parse_manifest flaw allows remote code execution (ZDI-26-938)
ZDI rates the unpatched flaw 7.8; a user must open a malicious file or visit a malicious page.
Stories per day · 30 days
3 RSS
Relatedzero-day28fairseq25meta25yaml20remote-code-execution17rce6kev4pan-os4cisa3cve-2026-03223firewall3ultralytics3zdi3command-injection2fortianalyzer2fortimanager2fortinet2freeswitch2
41 stories, newest first · one card per story
Stories tagged #code-injection
Meta fairseq load_audio_path flaw can run code (ZDI-26-913)
ZDI rates the unpatched issue 7.8; the user must visit a malicious page or open a file.
Meta fairseq FairseqAdam YAML parsing flaw enables RCE (ZDI-26-927)
Opening a malicious file is required; ZDI rates the unpatched issue CVSS 7.8.
Meta fairseq split_by_lang flaw allows remote code execution
ZDI rates the unpatched split_by_lang code-injection bug 7.8; a user must open a malicious page or file.
Meta fairseq FilterNamesDataset flaw allows remote code execution
ZDI rates the unpatched FilterNamesDataset code-injection bug 7.8; a user must open a malicious page or file.
CISA says IBM Faspex and FreeSWITCH flaws are exploited in attacks
Agencies must patch CVE-2026-123218 and CVE-2026-116779 within three days; GPUStack and SSHole are also listed as exploited.
1
FortiManager and FortiAnalyzer GUI flaws allow authenticated code execution
FG-IR-26-227 combines CWE-94 code injection and a CWE-120 buffer overflow, scored CVSS 7.2.
PrestaShop debug mode allows PHP injection (CVE-2026-124916)
A back-office user who can edit debug settings can inject PHP; 9.2.1 fixes it, but affected releases are unconfirmed.
Adobe patches eight critical Campaign Classic flaws and a Connect bug
Campaign Classic through 7.4.4 build 9402 is fixed in build 9403; Adobe reports no known exploits.
1
Ultralytics check_det_dataset code injection can run remote code
ZDI-26-813 is a CVSS 7.8 zero-day that requires opening a malicious file or page.
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 is scored 9.1 but needs Admin Console privileges, and the advisory reports no known exploitation.
1
NVIDIA Megatron Bridge YAML parsing bug enables code execution
CVE-2026-24250 requires a user to open a malicious file or page; ZDI rates it CVSS 7.8.
CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
CISA added PAN-OS code injection flaw CVE-2026-0322 to the KEV catalog after real-world attacks; federal agencies must mitigate by October 17.
7
CVE-2026-68571: Apache Kylin: JDBC URL Whitelist Verification Bypass
Apache Kylin CVE-2026-68571 lets crafted JDBC URLs bypass whitelist checks and inject code.
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
Attackers are exploiting PAN-OS CVE-2026-0322 for root access; CISA set a three-day fix.
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
Attackers are exploiting PAN-OS CVE-2026-0322 for limited root code execution through the management interface.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA added four actively exploited flaws in PAN-OS, Cisco Secure Email Gateway, and AhsayCBS to KEV.
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Researchers disclose StreamSets Transformer 3.17.0 auth fail-open and unsandboxed code execution as container root.
Kiteworks patches max severity code injection vulnerability
Kiteworks patched CVE-2026-54154, an unauthenticated code-injection flaw that can give attackers root on Email Protection Gateway appliances.
4
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
WatchGuard patched critical Fireware OS code injection that could give remote attackers root on Firebox appliances.
2
CISA Warns of Microsoft SharePoint Code Injection Vulnerability Exploited in Attacks
CISA added actively exploited SharePoint code-injection flaw CVE-2026-65660 to the KEV catalog, with federal fixes due September 28.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited SharePoint and MikroTik RouterOS flaws to the Known Exploited Vulnerabilities catalog.
AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660
Canada’s Cyber Centre says SharePoint flaw CVE-2026-65660 is actively exploited for code execution.
5
Siemens Desigo CC family
Siemens Desigo CC graphics documents can run attacker scripts and compromise client operating systems.