CVE-2026-73754

CVE-2026-73754 affects the command line interface of HPE AOS-CX (ArubaOS CX). The vulnerability allows an authenticated user with low privileges to trigger a denial-of-service , disrupting normal system operation. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high c...

PT-2026-84485

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Authenticated command injection flaws exist in the command line interface. Successful exploitation allows a privileged user to execute arbitrary commands on the underlying operating system...

PT-2026-84493

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A signature verification bypass exists in the command line interface. This issue allows an authenticated actor with administrative privileges to execute arbitrary code on the underlying...

PT-2026-84472

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A denial-of-service issue exists in the command line interface. An authenticated user could exploit this to disrupt the normal operation of the system. Recommendations At the moment, there is ...

[SECURITY] Fedora 44 Update: hcloud-1.67.0-1.fc44

A command-line interface for Hetzner Cloud...

EUVD-2026-66096

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65099

NVIDIA NemoClaw for Linux is vulnerable to an OS command injection in its command-line interface . A local attacker with low privileges and no user interaction can exploit this flaw to achieve code execution, data tampering, information disclosure, and denial of service (CVSS 7.8, HIGH). The CVSS...

CVE-2026-65099

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65099: Improper Neutralization of Special Elements used in an OS Command

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

PYSEC-2026-3627 AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

Summary The AWS Command Line Interface AWS CLI is a unified tool to manage AWS services from the command line. An issue exists where the EMR SSH helper commands aws emr ssh, aws emr socks, aws emr put, aws emr get passed StrictHostKeyChecking=no to the underlying SSH client, disabling host key...

[SECURITY] Fedora 44 Update: python-wsgidav-4.3.5-1.fc44

A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...

OESA-2026-3271 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

ImageMagick 7.x < 7.1.2-27 Memory Leak

The remote host has a version of ImageMagick installed that is 7.x prior to 7.1.2-27. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger...

EUVD-2026-53335

@oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation and executes them with execSync. A user-controlled project-name argument is inserted into the shell command without proper...

[SECURITY] Fedora 43 Update: doctl-1.164.0-1.fc43

The official command line interface for the DigitalOcean API...

CLSA-2026-1774225195 TuxCare security update for cli (1 CVE)

TuxCare rebuilt cli to address 1 CVE. Fixed in 0.4.3-tuxcare.1...

CVE-2026-14818

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

PT-2026-67635

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

EUVD-2026-52425

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code executi...

CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...