CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

MetInfo CMS flaw CVE-2026-29014 exploited after April 7 patch, enabling remote code execution and targeting 2,000 instances.

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Critical flaws affecting core components and extensions in PostgreSQL and MariaDB could allow remote code execution. The bugs ...

Security researchers warn that a vulnerability in the widely used Gemini CLI could allow remote code execution in CI/CD ...

The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...

Google claims to have thwarted a significant cyberattack by state-sponsored hackers using an AI-developed zero-day exploit.

GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private ...

The Ruby vulnerability is not easy to exploit, but allows an attacker to read sensitive data, start code, and install backdoors.

The update was announced to all admins via email; they should apply it promptly. Code injection is a risk. As announced on Monday, the n8n team has now released three new versions for its popular ...

The post OpenClaw-Based AI Agents Exposing 28,000 Systems to Hackers, Research Finds appeared first on Android Headlines.