Shellshock
Four days after Stéphane Chazelas at Akamai disclosed CVE-2014-6271 publicly. A bug in bash environment-variable parsing that has been there since 1989 and that allows arbitrary remote command execution in any service that passes user-controlled data into a bash environment.