@grackle-ai/cli (>=0.37.0, <=0.70.0), @grackle-ai/server (>=0.37.0, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.70.0)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.70.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XQ7H-VWJP-5VRH...

@grackle-ai/cli (>=0.0.2, <=0.70.2) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.2)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840352...

@grackle-ai/cli (>=0.0.2, <=0.70.2) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.2)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.2 Source cves: unknown CVE Source advisory: OSV:GHSA-W3HV-X4FP-6H6J...

@grackle-ai/cli (>=0.19.0, <=0.70.1), @grackle-ai/server (>=0.19.0, <=0.70.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.70.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.70.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIMCP-15874101...

@grackle-ai/cli (>=0.0.2, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.0)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840033...

@grackle-ai/cli (>=0.0.2, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.0)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.0 Source cves: unknown CVE Source advisory: OSV:GHSA-7Q9X-8G6P-3X75...

CVE-2026-20110

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because incorrect privileges are associated with the start maintenance command. An attacker could exploit th...

CVE-2026-20110

The CVE-2026-20110 affects Cisco IOS XE CLI. The issue stems from incorrect privileges tied to the start maintenance command, enabling a local, authenticated lower-privilege user to put the device into maintenance mode. This action shuts down interfaces and causes a DoS condition. Recovery is pos...

Malicious code in env-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1b6f1e45cba2962a0ff258e15bc55427bc91725fb41409442324f1a19cf520 The package env-node-cli was found to contain malicious code...

MAL-2026-2364 Malicious code in env-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1b6f1e45cba2962a0ff258e15bc55427bc91725fb41409442324f1a19cf520 The package env-node-cli was found to contain malicious code...

Malicious code in env-express-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c836e2eb4b78603e8fa096a1eb11b7b3b9e49a91bcfe0b82be74b1bdd1c58a03 The package env-express-cli was found to contain malicious code...

MAL-2026-2362 Malicious code in env-express-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c836e2eb4b78603e8fa096a1eb11b7b3b9e49a91bcfe0b82be74b1bdd1c58a03 The package env-express-cli was found to contain malicious code...

Malicious code in env-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e9b2427571d9edd96dfaefcc677578a0296dcf49d197e9482a67b794ea440e The package env-cli-express was found to contain malicious code...

MAL-2026-2358 Malicious code in env-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e9b2427571d9edd96dfaefcc677578a0296dcf49d197e9482a67b794ea440e The package env-cli-express was found to contain malicious code...

EUVD-2025-208939

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

The CVE-2025-15519 affects TP-Link Archer NX200/NX210/NX500/NX600 devices, where an improper input handling in the modem-management CLI allows authenticated administrators to inject commands that are executed by the OS. This can impact confidentiality, integrity, and availability as described. No...

CVE-2025-15518 Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2026-3587 Hidden CLI Function Allows Root Access

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device...