CVE-2026-86177: Missing Authorization

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedule.update permission to execute arbitrary console commands. Attackers can create and immediately trigger scheduled tasks that run game-server console command...

CVE-2014-0838

CVE-2014-0838 affects IBM QRadar SIEM: the AutoUpdate component (before 6.4) on QRadar SIEM 7.2 MR1 and earlier allows remote execution of console commands when an attacker can control the update server. Root cause: flaw in the AutoUpdate process that enables arbitrary command execution without l...

PT-2014-3882

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions prior to 7.2 MR1 with AutoUpdate package before 6.4 Description The issue allows remote attackers to execute arbitrary console commands by leveraging control of the server. Recommendations For IBM Security...

CVE-2014-0838: Undefined Security Weakness

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...