PT-2026-83946

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...

CVE-2026-79408

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...

RHEL 9 : sg3_utils (RHSA-2026:61260)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61260 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...

EUVD-2026-68877

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...

Linux Distros Unpatched Vulnerability : CVE-2026-13732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that...

PT-2026-89661

A flaw was found in GDB's STABS debug format parser. The read member functions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main...

SUSE-SU-2026:23552-1 Security update for vim

This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...

CVE-2026-37751: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...

CVE-2026-50979

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

CVE-2026-78612: Deserialization of Untrusted Data

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78613: Improper Neutralization of Special Elements used in an SQL Command

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78614: Deserialization of Untrusted Data

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-37751

The 23blocks-OS ai-maestro version v0.24.17 is affected by an OS command injection vulnerability within the killSessionSync function located in lib/agent-runtime.ts . This flaw allows an attacker to execute arbitrary commands by providing a crafted input . While the vulnerability is confirmed, th...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

Redis TLS pending-data list use-after-free

RISK EVALUATION Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis...

CVE-2026-81934 Redis TLS pending-data list use-after-free

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

CVE-2026-76220

A flaw was found in GitPython. A remote attacker can bypass the checkunsafeoptions guard by combining a single-character keyword argument with splitsinglecharoptions=False. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as clonefrom, leading ...

CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735

UI-TARS-desktop (ByteDance) — the mcp-http-server package defaulted its listen address to :: when no host was supplied, binding Streamable HTTP and SSE MCP transports to every network interface. Authentication middleware was optional, and the @agent-infra/mcp-server-commands and @agent-infra/mcp-...