/
attack_type:remote_code_execution × latest_source_host:bleepingcomputer.com × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

Critical BlockStrap flaw (CVE-2026-103849) in Magento and Adobe Commerce enables PHP code execution; exploitation expected

Sansec warns that a maximum-severity flaw, CVE-2026-103849 (dubbed BlockStrap), in Magento Open Source and Adobe Commerce could allow attackers to execute arbitrary PHP code on store servers. No in-the-wild exploitation has been observed yet, but Sansec identified four potential attack paths in under 24 hours and expects mass exploitation…

CVE-2026-103849 e-commerce retail
bleepingcomputer.com · high

F5 issues out-of-band patches for three critical NGINX flaws enabling DoS or code execution

F5 released out-of-band security patches for multiple NGINX flaws, including three critical vulnerabilities: CVE-2026-15176 and CVE-2026-97205 in the ngxhttpv3module, and CVE-2026-93479 in the NGINX map directive. Unprivileged remote attackers can exploit them against systems with non-default configurations to cause denial of service or, …

CVE-2026-15176 CVE-2026-97205 CVE-2026-93479