CVE-2026-108896

The Linksys E1700 (version 1.0.0.4.003 ) is vulnerable to OS command injection due to improper neutralization of special elements in the setLinksysIpv6 function located at /goform/setLinksysIpv6. An attacker can achieve remote command execution by manipulating the _6rd_prefix or _6rd_prefix_len a...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the IsRightsAuthorizedByName process. An attacker can bypass configured policy restrictions by creating a symbolic link that points to a policy-restricted path. Remediation A fix was pushed into the master branch...

CVE-2026-109226

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-108890

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-109225 SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload

SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions. Attackers can send concurrent large multipart uploads, which are fully read into memory before...

CVE-2026-108894

A security flaw in the Linksys E1700 (version 1.0.0.4.003) allows for OS command injection due to improper neutralization of special elements in the Static Route Handler component. Specifically, manipulating the staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, or ...

CVE-2026-108893

A stack-based buffer overflow vulnerability exists in Linksys E1700 hardware running firmware versions up to 1.0.0.4.003 . The flaw is located within the setVlan function of the /goform/setVlan file, where improper manipulation of the vlan_set argument allows for an overflow. This vulnerability c...

CVE-2026-108893 Linksys E1700 setVlan stack-based overflow

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlanset leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might ...

CVE-2026-108892 Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newaptext%d causes stack-based buffer overflow. The attack may be initiated remotel...

CVE-2026-108892

The Linksys E1700 (version 1.0.0.4.003) is vulnerable to a stack-based buffer overflow within the Mac Filter component. The flaw exists in the ssid1MACFilter function located in the file /goform/ssid1MACFilter , specifically triggered by the manipulation of the newap_text_%d argument. This vulner...

CVE-2026-108889

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...

DEBIAN-CVE-2026-105081

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...

UBUNTU-CVE-2026-105081

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...

CVE-2026-108890

A vulnerability exists in BlackBeltTechnology pi-agent-dashboard (versions up to 0.8.0 ) within the Terminal Handler component. Specifically, the terminalManager.spawn function in packages/server/src/browser-handlers/terminal-handler.ts is susceptible to improper authorization due to the manipula...

CVE-2026-108890 BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2026-105081 ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...

EUVD-2026-97369

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...

CVE-2026-108889

A flaw exists in Yungengxin Cloud Billing 2024.11.28.11 affecting the IOCTL Process Termination component. Specifically, the function sub_14000443C within the LWBilling64.sys library is vulnerable due to insufficient access control when the Pid argument is manipulated. This vulnerability can be e...

CVE-2026-108889 Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...

EUVD-2026-97368

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...