📰 News
SGLang RCE Exploit Breaches NEAR AI, Hits 18 AI Agents
Using an RCE bug in SGLang, the open-source AI inference engine, an attacker ran code on a NEAR AI server, then moved deeper and reached data on about 100 users and 18 AI agents.
#RCE
6 articles
🧩 CVEs
Windows Paint Flaw CVE-2026-83844: Update via the Store
Microsoft patched a remote code execution flaw, `CVE-2026-83844`, in Windows Paint after nearly a month of confusion over the fixed version and its Store availability. The safe version is 11.2609.401.0.
🧩 CVEs
Critical PTC Windchill RCE Flaw CVE-2026-126325 Patched
PTC released a fix for a critical flaw in its Windchill and FlexPLM product lifecycle software, tracked as `CVE-2026-126325` (CVSS 9.2), that could allow remote code execution through crafted requests.
🧩 CVEs
Git Flaw CVE-2026-111760 Lets Malicious Repos Run Code
Git fixed `CVE-2026-111760`, a flaw that lets a malicious repository run attacker code on a machine that clones it recursively with submodules. The fix is in 2.56.1, with backports for the 2.50 to 2.55 series.
🧩 CVEs
Apache HTTP/2 RCE Flaw CVE-2026-119618: Upgrade to 2.4.71
A critical mod_http2 flaw in Apache 2.4.55 to 2.4.70 lets unauthenticated attackers take over the server process. Upgrade to 2.4.71 or disable HTTP/2.
🧩 CVEs
PostgreSQL Fixes 52 Flaws, Including RCE Bug CVE-2026-6460
PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 flaws, led by CVE-2026-6460 (CVSS 8.8), which lets a database user run code on the server.