CVE-2026-73447

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

MAL-2026-16209 Malicious code in strapi-plugin-ccsuc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb6207f1b4ec4d94c724583a5f32b85f68d203e1a9e6372705b410efbf9173a The package's postinstall lifecycle script postinstall.js, wired via scripts.postinstall in package.json checks the installer's hostname against a...

Malicious code in strapi-plugin-ccsuc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb6207f1b4ec4d94c724583a5f32b85f68d203e1a9e6372705b410efbf9173a The package's postinstall lifecycle script postinstall.js, wired via scripts.postinstall in package.json checks the installer's hostname against a...

EUVD-2026-80216

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

CVE-Exploit-Research-Development

🔐 Herramienta de Explotación SSH Solo para Uso Educativo 📌 Descripción Esta herramienta demuestra la explotación de: CVE-2008-0166 CVE-2008-1657 Se conecta a servicios SSH vulnerables y proporciona: Shell interactivo persistente Registro de ejecución de comandos Generación automática de informes...

PT-2026-93432

Name of the Vulnerable Software and Affected Versions Edge units affected versions not specified Description An unauthenticated actor with network access to the private HA interconnect can trigger sensitive HA peer functions without verification. This flaw may lead to elevated command execution o...

PT-2026-93326

Name of the Vulnerable Software and Affected Versions Arista EOS-based products affected versions not specified Description An authenticated user can escalate privileges to root and execute arbitrary OS commands by sending a crafted Certz Rotate request to the gRPC Network Security Interface gNSI...

CVE-2026-73447: Improper Neutralization of Special Elements used in an OS Command

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

CVE-2026-86106: Missing Authentication for Critical Function

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled...

CVE-2026-84408: Exposed IOCTL with Insufficient Access Control

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

CVE-2026-76424: Relative Path Traversal

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2026-92718: Improper Verification of Cryptographic Signature

Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary...

CVE-2026-20324: Missing Authorization

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

CVE-2026-20211: Deserialization of Untrusted Data

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to...

Cisco Secure Email Gateway SQLi (cisco-sa-esa-inj-2bLVGmhX)

According to its self-reported version, Cisco Secure Email Gateway is affected by a SQL injection vulnerability. - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root...

CVE-2026-76420: Improper Authorization

A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...

CVE-2026-20340: Deserialization of Untrusted Data

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by...

PT-2026-94044

Name of the Vulnerable Software and Affected Versions Pelican Panel versions prior to 1.0.0-beta35 Description Startup write permissions are enforced only through disabled form controls instead of server-side authorization checks. An attacker with startup.read permission can craft Livewire state...

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router software allows a hacker to execute arbitrary commands.

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...