PT-2026-84409

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description An arbitrary file write flaw exists in the API of HPE Networking Fabric Composer. This issue allows an authenticated user with low privilege operator permissions to...

PT-2026-84423

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description An arbitrary file write issue exists in the API of the software, which could allow an authenticated administrative user to escalate privileges. Successful exploitation...

PT-2026-84416

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A flaw in the API allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host operating system, potentially leading to complete syste...

PT-2026-84481

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw in a management component allows an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation enables remote command...

PT-2026-106282

Уязвимость подсистемы безопасности Kauth графического интерфейса управления dnscrypt-proxy-gui связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольные команды...

ROS-20260901-73-0016

The vulnerability of the checkunsafeoptions mechanism in the Python library for interacting with Git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

CVE-2026-25706: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

CVE-2026-73751: Improper Neutralization of Special Elements used in a Command

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...

PT-2026-84297

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit a command injection flaw to execute arbitrary commands with root privileges. Command injection is a security issue where an...

PT-2026-84487

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An authenticated arbitrary file write issue allows an authenticated actor to create or modify files and execute arbitrary commands as a privileged user on the underlying operating system. This...

PT-2026-84486

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the command line interface allows for the improper processing of malformed input, which could enable an attacker to execute arbitrary commands with root privileges. Recommendations A...

PT-2026-89939

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2111 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicio...

Alibaba Cloud Linux 3 : 0273: sg3_utils (ALINUX3-SA-2026:0273)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0273 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-16313: A flaw was found in sg3utils. The...

CVE-2026-79408

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...

Command Injection

Overview @snyk/sweater-comb is a “Sweats the small stuff, so you don’t have to. OpenAPI linting rules for Snyk APIs.” Affected versions of this package are vulnerable to Command Injection through the expectGitBranch function in src/lint.ts. An attacker can execute arbitrary OS commands by supplyi...

CVE-2026-13732

A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main functio...

AZL-98547 CVE-2026-13732 affecting package crash 9.0.0-3

A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main functio...

AZL-98550 CVE-2026-13732 affecting package gdb 13.2-11

A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main functio...

DEBIAN-CVE-2026-13732

A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main functio...