PT-2026-26364

Name of the Vulnerable Software and Affected Versions Microsoft Bing Images affected versions not specified Description Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...

Photon OS 4.0: Linux PHSA-2026-4.0-0980

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0980. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2025-208846

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2026-24062

The Arturia Software Center (MacOS) version 2.12.0.3157 contains a local privilege escalation vulnerability (CVE-2026-24062). The issue resides in the Privileged Helper component, which fails to perform sufficient client code signature validation when a client connects. An attacker can exploit th...

CVE-2026-24062 Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

EUVD-2026-12786

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges...

CVE-2026-22317 Command Injection Vulnerability in Root CA Certificate Transfer Workflow

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges...

CVE-2026-22317 Command Injection Vulnerability in Root CA Certificate Transfer Workflow

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges...

CVE-2026-22317

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges...

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 CVSS score: N/A, has been described as a cross-origin issue in WebKit's Navigation API that could be...

EUVD-2026-12724

OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted commands by exploiting improper parsing of command substitution tokens. Attackers can craft shell payloads with command substitution...

Glances operating system command injection vulnerability

Glances is a system monitoring tool developed by Nicolas Hennion. Versions of Glances prior to 4.5.2 contained a vulnerability related to operating system command injection. This vulnerability stemmed from improper command splitting when Mustache template variables contained metacharacters,...

dc_state_free() Heap Buffer Overflow DoS

The vulnerability of the dcstatefree function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c driver, which is part of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems, involves pointer manipulation. Exploiting this vulnerability could allow a...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsdecompresscluster function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of...

DRI Graphics Heap Buffer Overflow DoS

The vulnerability of the radeonfenceissignaled function in the drivers/gpu/drm/radeon/radeonfence.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to...

Roxy-WI operating system command injection vulnerability

Roxy-WI is an open-source web interface designed for managing Haproxy, Nginx, and Keepalived servers. Versions prior to Roxy-WI 8.2.6.3 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the /config/compare///show endpoint, where command...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

PT-2026-26066

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

PT-2026-26033

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges...

Apple Security Advisory 03-17-2026-1

Apple Security Advisory 03-17-2026-1 - Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2 addresses a bypass vulnerability...