CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988

A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...

EUVD-2026-64252

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

Exploit for Improper Input Validation in Ui Unifi_Os_Server

UniFi OS CVE Proof of Concept Proof of concept untuk pengujia...

CVE-2026-77945

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

CVE-2026-77945 TRENDnet TEW-821DAP ssi upload.cgi command injection

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

EUVD-2026-64245

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

CVE-2026-77945 TRENDnet TEW-821DAP ssi upload.cgi command injection

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

CVE-2026-77945

A command injection vulnerability exists in TRENDnet TEW-821DAP firmware version 2.2.01b05 , specifically in the ssi component within the file /cgi-bin/upload.cgi. An attacker can manipulate the filename argument to inject arbitrary commands. The attack is remotely exploitable and requires low pr...

CLSA-2026-1787395146 pcp: Fix of 4 CVEs

CVE-2026-16527: add missing pmproxy -Q/-S flags and enforce -Q on the REST API - CVE-2026-16526: set FDCLOEXEC on AFUNIX sockets to stop pmdaroot fd inheritance - CVE-2026-16524: fix command injection in the linuxsockets PMDA filter - CVE-2026-16529: fix integer overflow in pmGetPDU causing...

CLSA-2026-1787394930 Fix of 10 CVEs

SECURITY UPDATE: command injection in the tar plugin: tarVimuntar escaped the tarball name with shellescape without the special argument before running gunzip/gzip through :!, so characters that Vim expands in a :! command line such as % and survived in the name and let a crafted archive name run...

SUSE CVE-2026-53804

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

PT-2026-79532

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-823DRU version 1.1.02b01 Description A weakness in the CLI Configuration Tool allows for remote command injection. This issue occurs within the nvram get function, where improper manipulation can lead to the execution of arbitrary...

PT-2026-79536

Name of the Vulnerable Software and Affected Versions better-npm-audit versions 3.x through 3.11.0 better-npm-audit version 4.0.0-rc.2 Description The software constructs an npm audit command by interpolating the user-supplied --registry option into a command string within...

PT-2026-79528

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A remote command injection issue exists within the ssi component. By manipulating the filename argument in the '/cgi-bin/upload.cgi' endpoint, an attacker can execute arbitrary commands on the...

SUSE SLED15 / SLES15 Security Update : rsync (SUSE-SU-2026:3657-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3657-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist...

MiracleLinux 9 : gpsd-minimal-3.26.1-2.el9_8.1 (AXSA:2026-1609:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1609:02 advisory. gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution CVE-2026-58459 Tenable has extracted the preceding description block...

CVE-2026-77988: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-57998: Improper Neutralization of Special Elements used in an OS Command

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

CVE-2026-68766: Improper Neutralization of Argument Delimiters in a Command

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...