Tailscale Releases Urgent Patches After Uncoordinated Disclosure of Tailworm Vulnerabilities
Tailscale issued critical updates for Tailworm bugs after a public disclosure, affecting versions 0.18.0 through 0.20.0.
remote code execution
4 stories
PHP2Shell CVEs: Immediate Patch Required for PHP 8.2.x and 8.3.x
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution in PHP 8.2.x and 8.3.x. PHP is used by approximately 75% of all websites.
Unpatched LMCache Vulnerability Exposes AI Servers to Remote Code Execution
An unpatched LMCache vulnerability leaves AI inference servers vulnerable to unauthenticated remote code execution via insecure Python deserialization.
SharePoint Server CVE-2026-65660: Authenticated RCE Disclosed by Viettel Researcher
SharePoint Server CVE-2026-65660 enables authenticated remote code execution. Microsoft initially mis-classified the flaw as spoofing.