Safeguard
Tag

remote-code-execution

Safeguard articles tagged "remote-code-execution" — guides, analysis, and best practices for software supply chain and application security.

61 articles

Vulnerability Analysis

CVE-2026-63077: Your Build Server Is a Credential Store With an Open Port

An unauthenticated attacker sends a crafted object to TeamCity's agent polling endpoint and gets OS command execution as the server process. Every credential the build server holds sits downstream.

Aug 11, 20267 min read
Vulnerability Analysis

CVE-2026-9198: Two Endpoints, No Password, Full Remote Code Execution

Langflow's auto-login endpoint mints a superuser token for anyone who asks. Its code-validation endpoint runs Python through exec(). Chained, that is unauthenticated RCE at CVSS 9.8.

Aug 10, 20266 min read
Vulnerability Analysis

H2 database console remote code execution (CVE-2021-42392)

CVE-2021-42392 lets attackers trigger RCE in H2's console and JDBC URL handling via a Log4Shell-style JNDI gadget. Here's what's affected and how to fix it.

Aug 7, 20267 min read
Vulnerability Analysis

Apache Solr XXE remote code execution (CVE-2017-12629)

CVE-2017-12629 chains XXE and Solr's RunExecutableListener into unauthenticated RCE. Affected versions, timeline, and concrete remediation steps.

Aug 6, 20267 min read
Vulnerability Analysis

Insecure deserialization vulnerabilities explained

Insecure deserialization vulnerabilities let attackers turn trusted classes into gadget chains for RCE. See real CVEs, affected languages, and fixes.

Aug 3, 20266 min read
Vulnerability Analysis

Server-side template injection (SSTI) explained

SSTI lets attackers turn template syntax into server-side RCE. See how it works, real CVEs like Confluence's, and how to prevent it.

Aug 1, 20267 min read
Open Source Security

CocoaPods Trunk Server Remote Code Execution (CVE-2024-38...

CVE-2024-38366 exposed a critical remote code execution flaw in the CocoaPods trunk server, threatening the iOS dependency supply chain for years undetected.

Jul 27, 20267 min read
Vulnerability Analysis

Git Remote Code Execution via Malicious .gitmodules Submo...

CVE-2018-11235 let a malicious .gitmodules file hijack Git submodule checkout, executing arbitrary code via post-checkout hooks on clone.

Jul 26, 20267 min read
DevSecOps

Jenkins Remote Code Execution via Groovy Metaclass (CVE-2...

CVE-2016-0792 let attackers bypass Jenkins' deserialization blacklist using Groovy's metaclass to achieve unauthenticated remote code execution via the CLI.

Jul 25, 20269 min read
Vulnerability Analysis

Nexus Repository Manager 3 Remote Code Execution (CVE-202...

CVE-2020-10199 is a critical Java EL injection flaw in Sonatype Nexus Repository Manager 3 letting authenticated users achieve remote code execution.

Jul 24, 20267 min read
Security

CVE-2023-36414: The Azure Identity SDK RCE You Should Patch

CVE-2023-36414 is a remote code execution flaw in the Azure Identity SDK for .NET. Here is how the injection works and which version closes it.

Jul 10, 20265 min read
Security Guides

Java Deserialization Vulnerabilities: How Gadget Chains Work and How to Stop Them

Native Java deserialization can turn a single readObject() call into remote code execution. Here's how gadget chains work and how to shut them down.

Jul 2, 20266 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

remote-code-execution — Safeguard Blog