869 matches found
CVE-2026-46597 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-46597 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
CVE-2026-42506 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-42506 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
CVE-2026-27136 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-27136 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-39821 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
CVE-2026-39834 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-39834 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fixed a reference count leak in octeoncfprobe. The function offinddevicebynode takes a reference; we should use putdevice to release that reference when it is no longer needed. Added the missing putdevice call ...
EUVD-2026-30935
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
CVE-2025-4202
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...
CVE-2025-4202 Multicollab: Content Team Collaboration and Editorial Workflow <= 5.2 - Missing Authorization to Authenticated (Subscriber+) Collaboration Comment
The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cfaddcomment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers...
MAL-2026-3427 Malicious code in @cplace-workflow-fe/cf-workflow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa219c5fdaf0ec8e6e0467fb1f23bfde9a07c18276187464062943e612848781 The package @cplace-workflow-fe/cf-workflow was found to contain malicious code. Source: ghsa-malware...
cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media (moderate)
cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media Announcement ID: openSUSE-SU-2026:10688-1 Rating: moderate Cross-References: CVE-2025-61729 CVSS scores: CVE-2025-61729 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-61729 SUSE : 8.7...
PT-2026-37362
These are all security issues fixed in the cf-cli-8.18.3+git.0.83ce51d9c-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-6799
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The...
CVE-2026-6799 Comfast CF-N1-S Endpoint mbox-config command injection
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The...
CVE-2026-6799
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The...
CVE-2026-6799 Comfast CF-N1-S Endpoint mbox-config command injection
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The...
CVE-2026-4467
A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET=wirelessdevicedissoc. The manipulation results in command injection. The attack can be executed remotely. The exploit has been made public and could be used. The...
CVE-2026-4466
A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-config?method=SET=ntptimezone. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be...
EUVD-2026-13524
A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=updateinterfacepng. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclose...
CVE-2026-4468 Comfast CF-AC100 mbox-config command injection
A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET§ion=updateinterfacepng. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclose...