ROOT-APP-NPM-CVE-2026-47137 CVE-2026-47137 in vm2 - Patched by Root

Root has patched CVE-2026-47137 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root

Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47210 CVE-2026-47210 in vm2 - Patched by Root

Root has patched CVE-2026-47210 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root

Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47131 CVE-2026-47131 in vm2 - Patched by Root

Root has patched CVE-2026-47131 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47208 CVE-2026-47208 in vm2 - Patched by Root

Root has patched CVE-2026-47208 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-ALPINE-315-CVE-2025-64720 CVE-2025-64720 in libpng - Patched by Root

Root has patched CVE-2025-64720 in the libpng package for Root:Alpine:3.15. Multiple fixed versions available...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity versions prior to 38.2 , as well as versions 39.0 , 39.1 , and 40.0 , are vulnerable to a privilege escalation flaw. The root cause is improper input validation within an internal Pexip Infinity service. An attacker with local access can escalate privileges to root , provided they ...

EUVD-2026-89583

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103106

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able to run arbitrary code on a node by eithe...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CLEANSTART-2026-DQ91908 On Linux, if the target of Root

Security vulnerability affects the minio-operator package. On Linux, if the target of Root...

EUVD-2026-89497

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

EUVD-2026-89466

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

EUVD-2026-89467

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 are vulnerable to a command injection vulnerability within the actions service. The flaw exists because the application builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Auth...