UBUNTU-CVE-2026-84837

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

CVE-2026-84675

The Jenkins TICS Plugin versions 2025.1.1 and earlier are vulnerable to an OS command injection flaw. The root cause is the failure to correctly escape build environment variable values when constructing OS commands. An attacker capable of controlling these environment variable values can execute...

EUVD-2026-70148

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

EUVD-2026-70108

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

The vulnerability in the script cgi/backup_mgr/iscsi_mgr.cgi of the D-Link DNS-345 and DNS-340L network storage software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability in the cgi/backupmgr/iscsimgr.cgi script of the D-Link DNS-345 and DNS-340L network storage software is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely and gai...

CVE-2026-84837: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

Switchvox pa endpoint SQL injection

Added: 09/02/2026 CVE: CVE-2026-9586 Background Switchvox is a VoIP and Unified Communications phone system. Problem An SQL injection vulnerability exposed by the unauthenticated /pa endpoint could allow a remote attacker to execute arbitrary commands. Resolution Upgrade to Switchvox 8.4.0.2 or...

The vulnerability in the cgi/disk_mgr/ve_mgr.cgi script of the D-Link DNS-327L and DNS-340L network storage software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability in the cgi/diskmgr/vemgr.cgi script of the D-Link DNS-327L and DNS-340L network storage software is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely and gain...

CVE-2026-79754: Improper Neutralization of Special Elements used in a Command

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

The vulnerability of the integrated security management platform Hikvision CSMP iSecure Center, which stems from the failure to take measures to neutralize specific elements, allows attackers to execute arbitrary commands.

The vulnerability of the integrated security management platform Hikvision CSMP iSecure Center lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands in JSON data...

OS command injection vulnerability on agents in tics

tics 2025.1.1 and earlier does not correctly escape build environment variable values when constructing the OS command it executes. This allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build. tics 2026.1.0 correctly escapes...

CVE-2026-73763

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

CVE-2026-73751

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...

CVE-2026-73753

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73766

CVE-2026-73766 is a command injection vulnerability in the API endpoint of HPE AOS-CX . An authenticated remote attacker with administrative privileges can inject arbitrary commands, potentially executing them as a privileged user on the underlying operating system. The HPE-assigned CVSS 3.1 scor...

EUVD-2026-69627

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

CVE-2026-73712 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

CVE-2026-79682

Dell PowerStore is affected by a Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) with a local attack vector, low complexity, and changed scope, resulting in high impact ...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69149

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...