484 matches found
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761
CVE-2026-76761 is an OS command injection vulnerability in chenhg5 cc-connect (up to version 1.4.1). The flaw resides in the shellExecCommand function within core/engine.go , part of the Management API component. An attacker can remotely manipulate the exec argument to inject and execute arbitrar...
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: pinot-fips, thingsboard, management-api-for-apache-cassandra-4.1, hadoop-fips, management-api-for-apache-cassandra-5.0, trino, pinot, tinkerpop, seata, celeborn, management-api-for-apache-cassandra-4.0, apache-hop-fips, tez...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: pinot-fips, thingsboard, management-api-for-apache-cassandra-4.1, hadoop-fips, management-api-for-apache-cassandra-5.0, trino, pinot, tinkerpop, seata, celeborn, management-api-for-apache-cassandra-4.0, apache-hop-fips, tez...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: tez, trino, celeborn, management-api-for-apache-cassandra-5.0, thingsboard...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: tez, akhq, trino, celeborn, management-api-for-apache-cassandra-5.0, druid, wildfly, apicurio-registry, wavefront-proxy, thingsboard, spark, kserve-modelmesh, sonarqube, opensearch, keycloak, strimzi-kafka-operator, zipkin, infinispan, apache-pulsar, logstash, flyway...
PT-2026-78861
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: thingsboard, hadoop-fips, management-api-for-apache-cassandra-5.0, tinkerpop, seata, apache-hop-fips, tez, apache-hop...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: tez, thingsboard, management-api-for-apache-cassandra-5.0...
CVE-2026-72655 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification
Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...
CVE-2026-55986 Email Management API Bypasses ManageCredentials Feature Restrictions
Email Management API Bypasses ManageCredentials Feature Restrictions...
CVE-2026-55986
The Gitea Git repository management platform is vulnerable to an access control deficiency in its Email Management API . This flaw allows an attacker to bypass restrictions within the ManageCredentials feature, potentially leading to privilege escalation remotely. While specific affected versions...
CVE-2026-55986 Email Management API Bypasses ManageCredentials Feature Restrictions
Email Management API Bypasses ManageCredentials Feature Restrictions...
CVE-2026-55986 Email Management API Bypasses ManageCredentials Feature Restrictions
Email Management API Bypasses ManageCredentials Feature Restrictions...
Kibana 8.19.20, 9.4.5 Security Update (ESA-2026-110)
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to...
PT-2026-71700
Name of the Vulnerable Software and Affected Versions Email Management API affected versions not specified Description The Email Management API contains a flaw that allows the bypass of restrictions within the ManageCredentials feature. Recommendations At the moment, there is no information about...