N-able ships N-central hotfix after 33 Able2Shell flaws go public
Build 2026.4.1.26 patches seven CVEs and disables remote control, while proof-of-concept code for all 33 issues stays public.
Stories per day · 30 days
11 RSS
Relatedphp69php2shell54meta50zero-day47deserialization41zdi29fairchem24fairseq20wordpress20code-injection17brotli14mod-php13kev12yaml12fortinet10cisa9microsoft9n-able9
217 stories, newest first · one card per story
Stories tagged #remote-code-execution
Citrix and Ivanti patch 19 flaws, including critical RCE bugs
Ivanti reports no evidence of exploitation; CSA 5.0.8.1 and Endpoint Manager 2024 SU8 fix the two critical defects.
FortiClient CORS flaw allows website-triggered RCE (CVE-2026-121529)
Fortinet says the CVSS 9.1 bug is not known exploited; fixes are 7.4.8 and 7.2.15, with no virtual patch.
1
N-able takes hosted N-central offline after 30-plus zero-day drop
Sean Bales published Able2Shell proof-of-concept code; N-able reports no exploitation and expects a hotfix around midday November 10.
1
N-able warns of scanning for critical N-central flaws after public PoC
Hotfix 2, build 2026.4.1.26, covers seven CVEs, including path-traversal remote code execution CVE-2026-125882.
Microsoft discloses Active Directory remote code execution and denial-of-service flaws
Both Important-rated flaws need low privileges; the record does not show an active exploitation campaign.
SAP patches four CVSS 10.0 flaws, including unauthenticated RCE
The November fixes cover NetWeaver ICM, Web Dispatcher, Gateway, and SAML, and none require user interaction.
Microsoft November 2026 patches critical RCEs and an exploited Outlook flaw
Only CVE-2026-124194, a moderate Outlook spoofing bug, is marked exploited; builds and fixes are not listed.
1
Fortinet patches critical unauthenticated code-execution flaws in management products
CVE-2026-126261 hits listed FortiManager branches; Fortinet reports no known exploitation, with fixes in 7.2.9, 7.4.6, 7.6.8 and 8.0.1.
Meta fairseq parse_manifest flaw allows remote code execution (ZDI-26-938)
ZDI rates the unpatched flaw 7.8; a user must open a malicious file or visit a malicious page.
Meta fairseq FairseqAdam YAML parsing flaw enables RCE (ZDI-26-927)
Opening a malicious file is required; ZDI rates the unpatched issue CVSS 7.8.
Meta FAIRChem NPZ parser allows RCE via untrusted data (ZDI-26-946)
ZDI rates the unpatched FAIRChem flaw 7.8; a user must open a malicious file or visit a malicious page.
fairseq load_speaker zero-day enables remote code execution
ZDI-26-917 scores the unpatched load_speaker code-injection flaw CVSS 7.8 and requires a malicious page or file.
Meta fairseq split_by_lang flaw allows remote code execution
ZDI rates the unpatched split_by_lang code-injection bug 7.8; a user must open a malicious page or file.
Meta fairseq FilterNamesDataset flaw allows remote code execution
ZDI rates the unpatched FilterNamesDataset code-injection bug 7.8; a user must open a malicious page or file.
Detectron2 load_proposals_into_dataset flaw allows RCE (ZDI-26-908)
ZDI rates this Meta Detectron2 zero-day 7.8; opening a file or page is required.
Plone hotfix 20261110 addresses remote code execution
Supported Plone 6.0, 6.1 and 6.2 are affected; the forwarded notice is cut off after older versions.
Fortinet patches critical unauthenticated code-execution flaws in management products
CVE-2026-126170 scores 9.8 on the JSON-RPC API; FGFM and OFTP flaws can also run code before login.
11
Exploit-DB lists RCE in Ruflo MCP Bridge 3.16.2
The public entry labels version 3.16.2 remotely exploitable but gives no CVE, fix, or confirmed attacks.
N-able ships N-central emergency fix after 33 exploits published
Hosted N-central was taken offline worldwide, and on-premises customers were told to shut servers down until 2026.4 HF2.
November 2026 Patch Tuesday lists dozens of Microsoft flaws
The excerpt lists 57 CVEs, including CVSS 9.8 remote code execution bugs rated exploitation less likely.
Microsoft November 2026 Patch Tuesday covers dozens of Windows flaws
The visible Rapid7 list includes several 9.8 remote code execution bugs; each entry is marked not publicly disclosed.
Near AI breach exposes about 100 users and data from 18 agents
The company says an attacker used a remote code execution flaw in SGLang to reach its inference infrastructure.
SAP patches critical ICM2SHELL and ProxyGate kernel flaws
Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.