Cognition releases plugin to fix RCE vulnerabilities in PHP and GitLab
Cognition has released an MIT-licensed plugin for the Devin agent that audits, patches, and tests vulnerable PHP, Node.js, and self-managed GitLab deployments against RCE flaws.
Everything you need to know about RCE. Read our latest news and technical analysis to understand its market impact.
Cognition has released an MIT-licensed plugin for the Devin agent that audits, patches, and tests vulnerable PHP, Node.js, and self-managed GitLab deployments against RCE flaws.
A critical zero-day vulnerability, dubbed 'StyleSmuggler,' affecting all versions of Magento Open Source and Adobe Commerce, is under active exploitation. This exploit enables attackers to remotely execute malicious code without authentication on e-commerce servers, leading to the installation of Linux backdoors.
Ruby on Rails has patched critical vulnerability CVE-2026-66066 in its Active Storage component, with a CVSS score of 9.5. This flaw allowed unauthenticated attackers to read arbitrary files and escalate to potential remote code execution (RCE) in Rails applications, impacting image processing.