PT-2026-99563

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.92.0 Description Install and uninstall scripts for macOS apps are generated using Homebrew cask metadata. In manifests created before 2026-08-19, the script generator failed to escape metadata at all interpolation...

PT-2026-99547

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description An OS command injection flaw exists in the Web Management Interface component. A remote attacker can exploit this by manipulating the QUERY STRING argument passed to the eval function with...

PT-2026-99711

Name of the Vulnerable Software and Affected Versions Obot versions up to and including commit d7e6970 Description The Docker quickstart command starts the container listening on 0.0.0.0:8080 with authentication disabled by default. In this state, every request is mapped to a synthetic "nobody"...

PT-2026-99714

Name of the Vulnerable Software and Affected Versions Nezha Dashboard versions prior to 2.3.5 Description Authenticated users with nezha:service:write scope can submit privileged task types through the service API because the system fails to restrict service monitor task types to supported probe...

CVE-2026-100852: Improper Neutralization of Special Elements used in an OS Command

AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run calls. Authenticated station users with Streamers and Profile permissions can set a username containing shell...

PT-2026-99548

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246.071246 Description An OS command injection flaw exists in the Tools Ping Handler component. A remote attacker can trigger this issue by manipulating the url argument passed to the system function with...

VulnCheck KEV: CVE-2026-100382

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from before 3.7...

VulnCheck KEV: CVE-2025-9090

A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

PT-2026-99545

Name of the Vulnerable Software and Affected Versions TOTOLINK N150RT version 3.4.0-B20201030 Description The Web Management Interface contains a flaw in the /boafrm/formWlSiteSurvey endpoint. Specifically, the system function fails to properly sanitize the wlanif argument, allowing a remote...

Citrix NetScaler Improper Input Validation Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands...

CVE-2026-101086: Improper Privilege Management

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-97160

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

EUVD-2026-87778

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160

The UP (Universal Plugin) for Joomla (path: plugins/content/up/) is vulnerable to PHP code injection in versions 5.0.0–5.2.0 and 6.0.0–6.0.29 . The root cause is the use of eval() (CWE-94) to process {up php=...} shortcodes. While typically requiring high privileges, older builds allow article au...

CVE-2026-100720

Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer the lowest-privileged authenticated role uploads an SSL certificate for one of their own domains, the Certificates API add/update methods parse it with opensslx509parse and store the issuer organization...

CVE-2026-100714

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no stringregexp or requiredotp guard, and its value is concatenated unescaped into the acme.sh command line built in...

CVE-2026-100643

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

Cross-site Scripting (XSS)

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the add and update methods of the Certificates API, which parse SSL certificates and store the issuer organization value without sanitization. An attacker...