PT-2026-22208

Name of the Vulnerable Software and Affected Versions NVDA Dev & Test Toolbox versions 2.0 through 8.0 Description A security issue exists in the Log Reader feature of the NVDA Dev & Test Toolbox add-on. Maliciously crafted log files can lead to arbitrary code execution when a user reads them usi...

CVE-2026-2636

CVE-2026-2636 affects the CLFS.sys driver via CWE-159 (Improper Handling of Invalid Use of Special Elements), causing an unrecoverable inconsistency that can trigger KeBugCheckEx and crash the system. Documented impact is Denial of Service/local crash with availability impact HIGH, while confiden...

CVE-2025-13943

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50ABVY.7C0 could allow an authenticated attacker to execute operating system OS commands on an affected device...

CVE-2025-13943

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50ABVY.7C0 could allow an authenticated attacker to execute operating system OS commands on an affected device...

CVE-2025-13943

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50ABVY.7C0 could allow an authenticated attacker to execute operating system OS commands on an affected device...

CVE-2025-13943

CVE-2025-13943 concerns Zyxel EX3301-T0 devices with firmware versions up to 5.50(ABVY.7)C0. The issue is a post-authentication command injection in the log file download function that could enable an authenticated attacker to run OS commands on the device. According to the connected documents, t...

📄 SuiteCRM 7.11.18 Log File Remote Code Execution

SuiteCRM version 7.11.18 allows modification of the logging configuration. The log filename extension is not validated properly .pHp accepted, causing the log to be interpreted as PHP. Then attacker injects PHP payload into the logs changing username lastname field resulting in the log file...

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-2605

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

CVE-2026-2605

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-2350 Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292 Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-2605

CVE-2026-2605 concerns Tanium TanOS, where an issue allows insertion of sensitive information into log files. Affected component: TanOS (Tanium). Root cause details are not fully disclosed in the provided documents; CVSS v3.1 base score 5.3 (Medium) with Confidentiality Impact: High, Attack Vecto...

CVE-2026-2605

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-2605 Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...