38040 matches found
CVE-2026-82537: Interpretation Conflict
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
CVE-2026-82536: Incomplete List of Disallowed Inputs
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...
CVE-2026-69392: Use After Free
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69829: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
PT-2026-87748
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-3310)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...
EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3332)
According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...
PT-2026-88440
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
Overview The UEFI Shell program may expose raw memory access capabilities that, if present in platform firmware for debugging or advanced support use cases, could be abused to undermine UEFI Secure Boot protections. When the UEFI Shell is included in SPI flash, an attacker with the ability to...
PT-2026-87141
A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...
CVE-2026-70563: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88277
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...
PT-2026-87429
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69606: Use After Free
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
NewStart CGSL MAIN 7.02 : httpd Vulnerability (NS-SA-2026-0094)
The remote NewStart CGSL host, running version MAIN 7.02, has httpd packages installed that are affected by a vulnerability: - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd=... directives...
EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-3385)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...
PT-2026-87801
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-86713: Use After Free
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the loadmon module's stop path where exitandcleanup deletes the LoadMon object and frees the performance counter before perfend attempts to access it. Attackers can trigger this vulnerability by issuing the loadmon stop comma...
PT-2026-88278
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...