CVE-2026-56686

Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-19982

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19983

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...

CVE-2026-19983

GL.iNet devices (A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000, XE3000) running 4.8.x are affected by a vulnerability in NAS Command Service due to improper processing of /usr/bin/gl_nas_sys, enabling remote OS command injection. The issue allows a remote attacker to execute arbitrary com...

CVE-2026-19983

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...

CVE-2026-19982

CVE-2026-19982 affects GL.iNet BE9300 and MT6000 devices running 4.8.x, in the firewall-management RPC component. The issue arises from input manipulation of dest_port/dest_ip, leading to an OS command injection. A remote attacker could trigger this without user interaction. Upgrading to version ...

CVE-2026-19982

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19982 GL.iNet BE9300/MT6000 Firewall-management RPC os command injection

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19982 GL.iNet BE9300/MT6000 Firewall-management RPC os command injection

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19981 GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulati...

CVE-2026-19978

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2026-19978

CVE-2026-19978 affects jiantao88 android-mcp-server. The vulnerability is in the function child_process.exec within the file build/index.js of the Command Execution component. An attacker can manipulate arguments such as deviceId , packageName , permission , and extras[].key/value to trigger OS c...

CVE-2026-19983: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...

PT-2026-76657

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this flaw to execut...

CVE-2026-67965: Improper Neutralization of Special Elements used in an OS Command

An issue in Tneda W20E v.16.01.0.62782 allows a remote attacker to execute arbitrary code via the urlneedlogin function...

CVE-2026-68519: Improper Neutralization of Special Elements used in an OS Command

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run in glances/actions.py ignores --disable-config-exec for on-alert action commands and invokes securepopen with shell operators enabled, allowing configured redirection, command chaining, or pipes to...

CVE-2026-19978: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2026-59910: Improper Neutralization of Special Elements used in an OS Command

Dell ObjectScale, versions prior to 4.3.0.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-75056: Improper Neutralization of Special Elements used in an OS Command

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

CVE-2026-62982: Improper Neutralization of Special Elements used in an OS Command

Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, sanitizemustachedict in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render and be executed by securepopen through...