Remote code execution
TrialTechniques
A vulnerability class that allows an attacker to run arbitrary code on a target system.
Why it's here
Placed in Trial: 9 article(s) of evidence from 5 source(s), led by security coverage, with 2 in the last 30 days. Confidence 84%.
Evidence (9)
- 7InfoQ·10/9/2026framework_updateShopify Rewrites Checkout Blocks for Smaller, Faster Bundles
Shopify updated its Checkout Blocks app by moving five high-traffic checkout UI extensions to remote-dom with Preact and Polaris web components. The rewrite, which also introduced TypeScript and a newer API version, reportedly cut bundle sizes by up to 85% and improved load times; only the updated versions will be supported from October 1, 2026.
- 9Hacker News·9/22/2026securityWordPress Fixes Unauthenticated Path Traversal with Conditional RCE Risk
A WordPress security advisory reports an unauthenticated path traversal vulnerability that can lead to remote code execution under certain conditions. The issue affects WordPress core and is being tracked as a security release item rather than a feature update.
- 9Simon Willison·9/10/2026securityCalif Research Demonstrates Zero-Click WeChat Worm
Calif Research says it has released a demo of WeWorm, a zero-click worm that can spread through WeChat calls on iOS and Android without the victim answering or interacting with the device. The team says AI helped them find the bug, build a remote code execution exploit, and develop the worm in a short timeframe.
- 9Hacker News·9/4/2026securityActively Exploited RCE in Chromium Sandbox
A vulnerability identified as CVE-2026-85046 affects Chromium-based browsers and is described as an actively exploited sandbox remote code execution issue. The report indicates the flaw impacts all Chromium versions, making it a high-priority security concern for browser users and vendors.
- 8Hacker News·7/31/2026securityArch Linux disables AUR orphaned package adoption
Arch Linux has disabled adoption of orphaned packages in the Arch User Repository after a wave of malicious takeovers and follow-up commits through the AUR. The attack campaign involved newly created accounts pushing malware-laced updates, including a remote-access trojan that communicated over Tor and attempted to exfiltrate user data.
- 8InfoQ·7/26/2026securityCrafted Video Flaw in FFmpeg Enables RCE in MagicYUV Decoder
JFrog Security Research disclosed PixelSmash, a vulnerability in FFmpeg that can enable remote code execution and denial of service. The issue has reportedly existed for 16 years and affects many applications using the MagicYUV decoder; users should patch or disable the decoder if needed.
- 8Hacker News·7/20/2026researchResearcher Finds WordPress RCE Using GPT-5.6 and $25
A security researcher says they discovered a WordPress remote code execution vulnerability and submitted it to exploit brokers, who reportedly pay up to $500,000 for such findings. The work was done with help from GPT-5.6 and about $25 in API spend, highlighting the use of AI tools in vulnerability research.
- 9Hugging Face Blog·7/16/2026securityHugging Face discloses AI-driven security intrusion
Hugging Face said it detected and contained an intrusion into part of its production infrastructure that used malicious datasets to exploit code-execution paths in dataset processing. The company reported limited internal data and credential exposure, with no evidence of tampering with public models, datasets, or Spaces, and said it rotated secrets, rebuilt affected nodes, and is investigating with outside specialists and law enforcement.
- 4Martin Fowler·4/9/2026securityFragments: podcasts, supply chain compromise, and documentation design
Martin Fowler highlights two podcasts: one with Simon Willison and Lenny Rachitsky on how programming has changed since the “November inflection point,” and another with Gergely Orosz interviewing former Uber CTO Thuan Pham. He also references Axios’ post-mortem on a supply chain compromise using a disguised remote access trojan, and briefly discusses Diátaxis, a framework for structuring technical documentation.