CVE-2026-95715

Technical details for CVE-2026-95715 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79956

The AOS-8 Web Interface is vulnerable to a Command Injection flaw caused by improper sanitization . While the provided documents do not specify the exact affected versions or the root cause in depth, the vulnerability allows for remote command execution. No specific remediation steps, exploit lin...

CVE-2026-79956 Improper Sanitization leads to Command Injection in AOS-8 Web Interface

A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to...

CVE-2026-79891

This vulnerability involves an unauthenticated buffer overflow in AOS-8 that can lead to Remote Code Execution (RCE) . While specific software versions and root causes are not detailed in the provided documents, the impact includes high severity across confidentiality, integrity, and availability...

CVE-2026-79889

Multiple unauthenticated buffer overflow vulnerabilities exist in the AOS-8 Web Interface , which can result in Remote Code Execution . While the specific underlying cause and affected versions are not detailed in the provided documents, the vulnerability is characterized by a High severity (CVSS...

CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise...

CVE-2026-79888

Technical details for CVE-2026-79888 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79881

Technical details for CVE-2026-79881 are not publicly available in the provided documents. While the title mentions an Authentication Bypass Leading to Remote Code Execution in AOS-8 , no specific root cause, impacted version, or remediation steps are provided. Monitor for updates.

CVE-2026-79877

Technical details for CVE-2026-79877 are not publicly available in the provided documents. Monitor for further updates regarding this entry.

CVE-2026-79867

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-79855 Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host...

CVE-2026-79851

A vulnerability exists in AOS-10 involving an unauthenticated buffer overflow that can lead to remote code execution . While the provided documents do not specify the exact component or root cause, the high severity score (10.0) indicates a significant risk to confidentiality, integrity, and avai...

CVE-2026-79850

Technical details for CVE-2026-79850 are not publicly available in the provided documents. While the title suggests an Authentication Bypass Leading to Remote Code Execution in AOS-8 , no specific root cause, impacted components, or remediation steps are detailed. Monitor for updates.

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified several vulnerabilities in various products, including the Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware including Helidon, and Oracle HTTP Server. These...

WAGO - Remote Command Execution

In multiple products of WAGO, a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behavior, Denial of Service, and full system compromise. id: CVE-2023-1698 info: name: WAGO - Remote Command Execution...

VulnCheck KEV: CVE-2026-7873

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

MAL-2026-17891 Malicious code in asistenyorstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159e4bc42ce900113481aa39dc41ea3c2bfe29a74a1cbb383cc80323dad13858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-53882

A path traversal vulnerability exists in Virtualization Station due to improper link resolution before file access (CWE-59) during the VM Import process. A remote attacker with a valid user account can exploit this flaw to compromise system security. The vulnerability is addressed in Virtualizati...

EUVD-2026-101982

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

EUVD-2026-101981

An unix symbolic link symlink following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 a...