Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.
A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's ...
Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.