#RCE

This archive brings together reporting on remote code execution, one of the most critical flaws affecting applications, systems, and connected devices. Readers will find analysis of vulnerabilities, active exploitation, potential impact, and mitigation steps relevant to security teams and organizations across Latin America.

CVE-2026-62911 Leaves 21,899 Exchange Exposed

A public PoC for CVE-2026-62911 shows an attack chain that can end in RCE and SYSTEM on Exchange, with 21,899 servers still vulnerable.

Sep 3, 2026 · 2 min

Microsoft Entra ID: CVE-2026-69836 patched

Microsoft fixed CVE-2026-69836 in Entra ID, a critical deserialization flaw rated CVSS 10.0. No customer action is needed.

Aug 23, 2026 · 2 min

CVE-2026-56291 hits Balbooa Forms on Joomla

Balbooa Forms for Joomla had a critical RCE abused as a zero-day. Patch 2.4.1 landed July 9, and CISA added it to KEV.

Jul 15, 2026 · 3 min