CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

EUVD-2026-98967

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-106171

Fortinet FortiManager versions 8.0.0, 7.6.0 through 7.6.6, and FortiManager Cloud versions 7.6.2 through 7.6.6 are affected by an os command injection vulnerability. This flaw stems from the improper neutralization of special elements used in an os command, which may allow an attacker to achieve ...

CVE-2026-106171

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets...

CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

CVE-2026-104085

The odt2spip plugin for SPIP (versions before 4.4.0) is vulnerable to OS command injection . The root cause is insufficient sanitization of document filenames within the odt2spip_deplacer_fichier_upload() function and LibreOffice::createCommand(). Authenticated authors can execute arbitrary comma...

CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

CVE-2026-55562

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-104126

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...

CVE-2026-108976

A flaw was found in Emacs. Processing a specially crafted filename with TRAMP can cause an OS command execution because tramp-user-regexp has an incomplete list of disallowed inputs. This vulnerability exists due to an incomplete fix of CVE-2026-79992. Mitigation To mitigate this vulnerability, d...

CVE-2026-104126 JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...

CVE-2026-104126 JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...

CVE-2026-104126

JumpServer, an open-source bastion host, contains a vulnerability in its Ansible-based automation rendering prior to version 4.10.17-lts . The root cause is the evaluation of attacker-controlled template expressions by users with permissions to create or execute automation tasks. This allows for ...

CVE-2026-55562

Cronicle, a multi-server task scheduler and runner, contains a Stored XSS vulnerability in the administrator Activity Log prior to version 0.9.119 . The flaw exists in htdocs/js/pages/admin/Activity.js, where the item.user.full_name value is concatenated into HTML without proper encoding. Attacke...

CVE-2026-55562

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-102832

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to resolve the current Markdown viewer or...

CVE-2026-104935

Ivanti Connect Secure (ICS) is vulnerable to an authentication bypass by spoofing (CWE-290) allowing a remote, unauthenticated attacker to execute arbitrary commands. The flaw affects ICS versions before 25.1.3.0 , excluding version 22.7R2.14 and prior. Exploitation in the wild is confirmed and a...