CVE-2026-62371

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until 1.21.2, 1.22.2, and 1.23.1, the v1alpha2 NodeUpgradeJob handler in edge/pkg/taskmanager/actions/nodeupgradejob.go concatenates authenticated...

SUSE CVE-2026-73667

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the subprocess compute provider in the Worker Controller Instance module. An attacker can execute arbitrary commands on the Worker Service host by supplying a crafted compute provider configuration in their request...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the subprocess compute provider in the Worker Controller Instance module. An attacker can execute arbitrary commands on the Worker Service host by supplying a crafted compute provider configuration in their request...

CVE-2026-62371: Improper Neutralization of Special Elements used in an OS Command

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until 1.21.2, 1.22.2, and 1.23.1, the v1alpha2 NodeUpgradeJob handler in edge/pkg/taskmanager/actions/nodeupgradejob.go concatenates authenticated...

PT-2026-96261

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.5-lts Description Authenticated workspace members can inject control characters into the AWS Bedrock access key id and secret access key fields. These values are processed by the update aws credentials function and...

PT-2026-96087

Name of the Vulnerable Software and Affected Versions Tuleap Enterprise Edition versions 17.3 through 17.5 Description An OS Command Injection flaw allows an attacker to execute arbitrary commands on the server. OS Command Injection is a flaw where an application passes unsafe user-supplied data ...

PT-2026-96168

Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.12.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 through 1.23.0 Description The v1alpha2 NodeUpgradeJob handler in edge/pkg/taskmanager/actions/nodeupgradejob.go concatenates authenticate...

PT-2026-96233

Name of the Vulnerable Software and Affected Versions luci-app-advanced-reboot versions prior to 1.1.2-6 Description An issue exists where the read Access Control List ACL in the file applications/luci-app-advanced-reboot/root/usr/share/rpcd/acl.d/luci-app-advanced-reboot.json grants rpcd the...

CVE-2026-84285: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...

PT-2026-95934

Name of the Vulnerable Software and Affected Versions aiyiyi121 SxDevOps versions 1.0 through 1.1 Description A command injection issue exists within the Command Handler component. The generate host task function in the backend/aiops/services.py file fails to properly handle the command argument,...

GHSA-9HXX-M5G2-2Q3H Duplicate Advisory: vm2 contains a sandbox escape vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pq68-rvw4-xp4r. This link is maintained to preserve external references. Original Description vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits...

PT-2026-95623

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper validation of user supplied input allows an authenticated user to execute arbitrary commands with low user privileges on the system. Recommendations At the moment, there is no...

PT-2026-95436

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data version 5.1.2 Description An authenticated user can execute arbitrary commands with elevated privileges on the system. This is caused by improper validation of user supplied input. Recommendations At the moment, there is...

PT-2026-95633

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists where a remote authenticated attacker can execute arbitrary commands. This occurs due to improper neutralization of special elements used in an OS command, which allows the...

PT-2026-95667

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands on the system. Recommendations Isolate exposed instances of IBM...

CVE-2026-84083: Improper Privilege Management

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo , Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about 490 million image metadata records, mostly for images from...

PT-2026-94230

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An Improper Neutralization of Special Elements used in an OS Command, known as OS Command Injection, allows an unauthenticated remote attacker to execute arbitrary...

PT-2026-94397

Name of the Vulnerable Software and Affected Versions Appwrite versions prior to 2.0.0 Description Authenticated users with functions.write or sites.write permissions can execute arbitrary commands. This occurs because the application uses escapeshellcmd instead of escapeshellarg and fails to quo...