Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/13 11:28 a.m.•28 views

CVE-2026-73615 Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

8.7CVSS5.5AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/13 11:28 a.m.•11 views

CVE-2026-73615 Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

8.8CVSS5.9AI score0.00654EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/13 11:28 a.m.•54 views

CVE-2026-73615 Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

8.8CVSS0.00654EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/13 11:28 a.m.•45 views

CVE-2026-73615

Network-AI before 5.15.1 is affected by a SandboxPolicy command parsing flaw where raw command strings are evaluated with quotes preserved, while the executor tokenizes by stripping quotes. This mismatch lets an attacker craft quoted commands that bypass blocklists and approval gates, while the e...

8.8CVSS5.9AI score0.00654EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•5 views

CVE-2026-73615: Interpretation Conflict

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

8.8CVSS5.9AI score0.00654EPSS
SaveExploits0References2
Apple
Apple
•added 2017/01/23 3:54 a.m.•123 views

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

9.8CVSS7.1AI score0.36009EPSS
SaveExploits62Affected Software5
Rows per page
Query Builder