CVE-2026-84085: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84071: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

CVE-2026-82892: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-81937: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelogconfig file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root...

CVE-2026-81623: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...

CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-82887: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-81669: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-93371: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

EUVD-2026-82975

NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...

PT-2026-95676

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An OS command injection flaw exists in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a...

PT-2026-95225

Name of the Vulnerable Software and Affected Versions marcopiovanello yt-dlp-web-ui versions prior to v5 Description Remote command injection is possible through the manipulation of the params argument within the NewGenericDownload function located in the server/internal/downloaders/generic.go...

Rsync Arbitrary Command Execution

The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-95629

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists in the import remotelog config file CLI command where a highly privileged authenticated user can inject shell commands through the filename parameter. This can lead to...

Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the createDBLink method. The issue results from the lac...

CVE-2026-80442: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentiality, integrity, and availability of the affect...

CVE-2025-14754: Improper Neutralization of Special Elements used in an OS Command

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

Tenda G103 Component Arbitrary Command Execution

The vulnerability of the actionsetnetsettings function gpon.lua in the Setting Handler component of the GPON-terminal software Tenda G103 is related to the lack of measures to sanitize input data during the processing of parameters...

Cisco Nexus Dashboard Software Security Hardening Release: September 2026 (cisco-sa-hardening-ndw1-psFvnrg)

According to its self-reported version, Cisco Nexus Dashboard is affected by multiple vulnerabilities. - An improper access control vulnerability affecting authorization, authentication, privileges, and bypasses. CVE-2026-20322 - An improper neutralization of special elements used in a command...

PT-2026-95622

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated OS command injection flaw exists in the exportCertificate functionality. This issue allows an attacker to execute unauthorized commands on the system, potentially...