CVE-2026-26720-Twenty-RCE

Twenty CRM - تنفيذ التعليمات البرمجية عن بُعد RCE بعد المصادقة نظرة عامة المنتج: Twenty CRM الثغرة الأمنية: تنفيذ التعليمات البرمجية عن بُعد RCE عبر دوال Serverless في سير العمل الخطورة: حرجة المكوّن المتأثر: أتمتة سير العمل Code - Serverless Function الإصدار المُختبَر: v1.15.0 يوثّق هذا المستودع...

CVE-2026-65590: Improper Neutralization of Special Elements used in an OS Command

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

CVE-2025-15540: Improper Control of Generation of Code

"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...

Remote Code Execution (RCE)

Langflow is vulnerable to Remote Code Execution RCE. The vulnerability is due to the lack of sandboxing, allowing an attacker to execute arbitrary code on the local machine...