CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

CVE-2026-4255

CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...

CVE-2026-54160: Inclusion of Functionality from Untrusted Control Sphere

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...

baserCMS plugin "BcAddonMigrator" vulnerable to inclusion of functionality from untrusted control sphere

Overview baserCMS plugin "BcAddonMigrator" provided by baserCMS Users Community contains the following vulnerability. Inclusion of Functionality from Untrusted Control Sphere CWE-829 - CVE-2026-97150 Kuniyoshi Noguchi KuniNogu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability t...

EUVD-2026-84960

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-17647

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-17647 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-17647

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by vulnerabilities that could allow a local attacker to execute arbitrary commands . This issue stems from the inclusion of functionality originating from an untrusted control sphere . The vulnerability is assigned a CVSS 3....

CVE-2026-17647 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-17647: Inclusion of Functionality from Untrusted Control Sphere

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere...

CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...

CVE-2026-81305 CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...

EUVD-2026-76443

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-79721: Inclusion of Functionality from Untrusted Control Sphere

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

EUVD-2026-69230

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...