CVE-2026-3854 2

Vulnerability (CVE)

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

Researchers disclosed CVE-2026-3854, a command injection flaw with a CVSS score of 8.7 in GitHub.com and GitHub Enterprise Server that lets an authenticated user with push access achieve remote code execution through a single git push. GitHub's advisory...

Vulnerabilities & Patching

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

Cyber Risks The Hacker News

A critical cPanel and WebHost Manager flaw tracked as CVE-2026-41940 is under active exploitation, allowing authentication bypass and remote attackers to gain elevated control of the control panel, with some attacks wiping entire websites and backups and...

Vulnerabilities & Patching