CVE-2026-44096

The CVE-2026-44096 entry describes a privilege escalation in udhcpc that allows a local user named "charx-web" to run arbitrary commands as root, leading to full system compromise. The available connected sources confirm the affected component (udhcpc) and the local-exploit scenario, with high se...

EUVD-2026-51028

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

UBUNTU-CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-16526

CVE-2026-16526 involves a flaw in the PCP linux_sockets module where an unsecured internal connection can be leveraged by an attacker with initial code execution to escalate privileges and gain root access. The provided connected documents identify the affected component and the impact (privilege...

CVE-2026-16524 Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection

A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh...

CVE-2026-16524

CVE-2026-16524 : A command injection flaw affects PCP’s linux_sockets PMDA. The vulnerability allows injection of shell metacharacters via the metric network.persocket.filter, and, due to failed validation, enables arbitrary command execution as the PMDA user during metrics refresh. The CVSSv3.1 ...

CVE-2026-14522: Improper Neutralization of Special Elements used in an OS Command

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters...

CVE-2026-38709: Improper Neutralization of Special Elements used in a Command

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the net.setwan interface. This vulnerability allows attackers to execute arbitrary...

CVE-2026-44093: Improper Neutralization of Special Elements used in an OS Command

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44095: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-38709

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the net.setwan interface. This vulnerability allows attackers to execute arbitrary...

CVE-2026-16526: Exposure of File Descriptor to Unintended Control Sphere

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-44099: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44106: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44096: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

PT-2026-66363

Name of the Vulnerable Software and Affected Versions PCP affected versions not specified Description A flaw in the linux sockets module exposes an unsecured internal connection. An attacker who has already achieved initial code execution can exploit this weakness to escalate privileges and execu...

The vulnerability of the AI.Plugin.Azure software for vulnerability and error detection tools like PT Application Inspector arises from the lack of measures taken to neutralize special elements. This allows attackers to execute arbitrary commands.

The vulnerability of the AI.Plugin.Azure software patch, which is used for identifying vulnerabilities and errors in PT Application Inspector, stems from the lack of measures taken to neutralize its special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2026-54680

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...

CVE-2026-60112 AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...