9 matches found
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 — 代码分析 Cockpit：通过 SSH 命令行参数注入实现未认证远程代码执行 字段| 详情 ---|--- CVE ID| CVE-2026-4631 GHSA| GHSA-m4gv-x78h-3427 严重性| 严重（CVSS 9.8） 受影响版本| Cockpit 327 – 359 修复版本| Cockpit 360 CWE| CWE-78：操作系统命令注入 是否需要认证| 否 报告者| Jelle van der Waa 目录 1. 漏洞概述 2. 架构背景 3. 根本原因分析 4. 漏洞代码——逐文件分析 5. 攻击向量 6. 数据流图 7...
CVE-2026-84694 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...
PT-2026-56706
Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation. Affecte...
GHSA-MCQQ-FQGF-RXWM Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`
Summary coder config-ssh wrote server-supplied SSH settings HostnameSuffix, SSHConfigOptions into the user's /.ssh/config without sanitizing embedded newlines or restricting directives so a malicious or compromised Coder server could inject arbitrary SSH configuration. Note: Practical exploitatio...
MGASA-2026-0099 Updated cockpit-338 packages fix security vulnerability
Unauthenticated remote code execution due to ssh command-line argument injection. CVE-2026-4631...
CVE-2025-67035
The Lantronix EDS5000 (version 2.1.0.0R3 ) is vulnerable to multiple OS injection flaws located in the SSH Client and SSH Server pages. The root cause is a lack of input sanitization for certain parameters. An attacker can exploit this by injecting arbitrary commands during delete actions for obj...
CVE-2024-34713 sshproxy vulnerable to SSH option injection
sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. Prior to version 1.6.3, any user authorized to connect to a ssh server using sshproxy can inject options to the ssh command executed by sshproxy. All versions of sshproxy are...
