487682 matches found
CVE-2026-61409
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
EUVD-2026-72385
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...
CVE-2026-86427 LibreNMS before 26.8.0 Argument Injection via graph_title
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...
CVE-2026-86427
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter . The root cause is the ability to break out of double-quote escaping, allowing authenticated attackers to inject arbitrary rrdtool arguments . This enables reading RRD files from unauthorized devices...
CVE-2026-86427 LibreNMS before 26.8.0 Argument Injection via graph_title
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...
EUVD-2026-72361
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
CVE-2026-61409
Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...
CVE-2026-61409
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
CVE-2026-86299
A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...
CVE-2026-79678 Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...
EUVD-2026-72357
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...
CVE-2026-79678
A flaw in FreeIPA 's idp-add command allows insufficiently validated --organization/--base-url input to reach a constrained eval() call before the corresponding LDAP access control check is enforced. Any authenticated IPA principal, regardless of privilege level, can enumerate and read environmen...
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...
CVE-2026-79678
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...
CVE-2026-19634
A flaw was found in PostgreSQL Anonymizer. A SQL injection vulnerability exists in the importdatabaserules and importrolesrules functions. A malicious user can craft a JSON document with specially designed object names. If a superuser then imports this document, the malicious code within it can b...
CVE-2026-86298
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-86295
A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...
CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...
CVE-2026-86299
Linksys RE7000 (version 2.0.15) is affected by an OS command injection in the PingTest Handler component. The vulnerable function is platform_event_pingTest in /cgi-bin/json.cgi?PingTest, where manipulation of the pingTestIp, pingTestPktSize, or pingTestTimes arguments allows an attacker to injec...
EUVD-2026-72349
A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...