EUVD-2026-52517

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

EUVD-2026-52519

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-67979

NASA cFS v7.0.1 is affected by CVE-2026-67979 due to incorrect access control in the Executive Services dynamic application start path component. The flaw allows an attacker to achieve arbitrary code execution by placing a shared object on target storage. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:...

CVE-2026-51401

CVE-2026-51401 concerns Vim up to v9.2.0389 where a local attacker can execute arbitrary code via the vms_fixfilename() function in vim/src/os_vms.c. Red Hat notes the vulnerable path is confined to Vim’s OpenVMS platform support and is not included in Red Hat Enterprise Linux or Fedora builds, i...

CVE-2026-48323

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-48330

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-48323

CVE-2026-48323 affects Adobe Campaign Classic (ACC): an Improper Neutralization of Special Elements Used in a Template Engine vulnerability could allow arbitrary code execution in the current user context. Exploitation does not require user interaction; the scope has been changed. The connected d...

CVE-2026-48317 Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-48317

Adobe Campaign Classic (ACC) is affected by an Eval Injection vulnerability (Improper Neutralization of Directives in Dynamically Evaluated Code) that could allow arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user inte...

CVE-2026-48330

Adobe Campaign Classic (ACC) is affected by an SQL Injection (CWE-89) vulnerability: Improper neutralization of special elements in SQL commands could allow arbitrary code execution in the current user context. Attack vector is network with no user interaction required; scope is changed. CVSS v3....

CVE-2026-48326 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-48326

Adobe Campaign Classic (ACC) is affected by an SQL Injection (Improper Neutralization of Special Elements used in an SQL Command) that could enable arbitrary code execution in the context of the current user. The issue can be exploited by a low-privileged attacker without user interaction, and th...

CVE-2026-67323

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

CVE-2026-47211

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code executi...

CVE-2026-47211

CVE-2026-47211 affects Ouroboros (local-first runtime for AI coding agents). Prior to version 0.39.0, loading the project-local .env could cause arbitrary code execution when a user runs Ouroboros commands in a cloned malicious repository; execution-affecting variables like OUROBOROS_CLI_PATH and...

EUVD-2026-52425

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code executi...

CVE-2026-59912

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...

CVE-2026-59912

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...

CVE-2026-59912

Dell Display and Peripheral Manager (DDPM Mac) prior to 2.3.0.1005 is affected by an Improper Access Control vulnerability. A low-privileged attacker with local access could exploit this to achieve Elevation of Privileges and arbitrary code execution. Affected component: DDPM Mac (Mac version). R...

CVE-2026-59912

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...