Incident feed · ShipSecurely

Remote code execution incidents

3 incidents filed as Remote code execution, newest first.

Stack

Remote code executionOct 12, 2026
GitLab patched a maximum-severity bug in its CI regex compiler
On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8. CVE-2026-97229, scored 10.0, can let an unauthenticated user run code on a self-managed server through a crafted CI regular expression.
- GitLab
Remote code executionOct 7, 2026
Attackers chained two AhsayCBS bugs to run code and install a miner
Huntress says attackers started exploiting CVE-2026-105133 and CVE-2026-105134 in AhsayCBS on October 7, 2026, after the flaws were disclosed on October 4. They ran code, planted webshells, and installed a cryptominer.
- Backup
Remote code executionSep 27, 2026
Citrix NetScaler vulnerabilities were exploited on unmitigated deployments
On September 27, 2026, Citrix published fixes for NetScaler ADC and NetScaler Gateway. CVE-2026-88771 lets an unauthenticated attacker run commands on a default deployment, and Citrix says exploits of that bug and CVE-2026-88772 have been observed.
- Citrix
- VPN