The vulnerability of the command-line interface (CLI) of Cisco IOS XR operating systems allows attackers to enhance their privileges and bypass existing security mechanisms.

The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability can allow attackers to enhance their privileges and bypass existing security mechanisms...

Fortinet FortiSandbox 路径遍历漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection device developed by the American company Fortinet. This device offers features such as dual sandbox technology, dynamic threat intelligence systems, a real-time control panel, and reporting capabilities. Fortinet FortiSandbox h...

CVE-2025-61260

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP Model Context Protocol configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads...

CVE-2025-61260

The CVE-2025-61260 issue affects the OpenAI Codex CLI, specifically versions prior to 0.23.0. The root cause is improper handling of repository-local configuration files (notably .env and .codex/config.toml) that are loaded automatically when the codex command is executed in a malicious or compro...

CVE-2025-61260

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP Model Context Protocol configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads...

Path Traversal in CLI

...

CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen to determine buffer length instead of the actual byte...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

CVE-2026-21915

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

OPENSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media

These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-set-status, cluster-api-helm-controller-fips, k9s, kots, kube-arangodb, kube-arangodb-fips, headlamp, nova, flux, flux-source-controller-fips, kubescape-server-fips, tigera-operator, nova-fips, consul-k8s-fips, k8ssandra-client-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cilium-cli, gitlab-kas, falco-no-driver, aws-flb-kinesis, cilium, gitlab-pages, kaf, zot, kots, kube-fluentd-operator, aactl, gitaly, external-secrets-operator, mattermost, telegraf, istio, runc, aws-flb-cloudwatch, ingress-nginx-controller, k3s,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, rancher-agent, kubernetes-replicator, cilium, custom-pod-autoscaler-operator, net-kourier, zot, azure-workload-identity-webhook, frp, kuberlr, yunikorn-k8shim, pgtimetable, grafana-agent-operator, syft, kube-vip, postgres-operator, db-operator,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, polaris, lazydocker, opentelemetry-operator, rancher-agent, cilium, argo-events, net-kourier, rancher-helm, sftpgo-plugin-auth, dbmate, knative-client, cadvisor, zot, grafana-rollout-operator, sftpgo-plugin-eventsearch, falcoctl, etcd, trivy,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: nerdctl, neuvector-scanner-fips, kubernetes-csi-driver-nfs-fips, prometheus-elasticsearch-exporter, gitlab-rails-ce, xeol, rancher, licenseclassifier, vault-csi-provider, cert-manager-fips, helm-mapkubeapis, conftest-fips, buildkite-agent-fips, cosign,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: nerdctl, neuvector-scanner-fips, kubernetes-csi-driver-nfs-fips, prometheus-elasticsearch-exporter, gitlab-rails-ce, xeol, rancher, licenseclassifier, vault-csi-provider, cert-manager-fips, helm-mapkubeapis, conftest-fips, buildkite-agent-fips, cosign,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: logstash-exporter-fips, nerdctl, neuvector-scanner-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-aws-firehose-fips, kuberlr, git-sync-fips, pvc-autoresizer, prometheus-elasticsearch-exporter, kubevirt-cdi-controller, omnibump, gitlab-rails-ce,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: logstash-exporter-fips, nerdctl, neuvector-scanner-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-aws-firehose-fips, kuberlr, git-sync-fips, pvc-autoresizer, prometheus-elasticsearch-exporter, kubevirt-cdi-controller, omnibump, gitlab-rails-ce,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: logstash-exporter-fips, nerdctl, neuvector-scanner-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-aws-firehose-fips, kuberlr, git-sync-fips, pvc-autoresizer, prometheus-elasticsearch-exporter, kubevirt-cdi-controller, omnibump, gitlab-rails-ce,...