
LMCache 0.3.9-0.5.5: Pickle Deserialization Flaw Grants Root RCE via Exposed ZeroMQ Ports
A critical flaw in LMCache allows unauthenticated remote code execution on exposed ZeroMQ ports, risking full system compromise for multi-node deployments.
Everything BitShield News has reported about Remote Code Execution: 5 stories, newest first. Part of our Vulnerabilities coverage.

A critical flaw in LMCache allows unauthenticated remote code execution on exposed ZeroMQ ports, risking full system compromise for multi-node deployments.

A critical authorization flaw in Adobe ColdFusion allows low-privileged attackers to run code without user interaction, affecting versions up to 2023.0.25 and 2025.0.13.

A CVSS 9.8 vulnerability in Adobe Commerce and Magento Open Source allows attackers to run arbitrary code without user interaction.

WatchTowr Labs reveals four linked vulnerabilities in PaperCut software that allow remote code execution without credentials and evade existing fixes.

The NVD rates this flaw as critical, allowing attackers to bypass authentication checks and run server-side code on vulnerable sites.