8269 matches found
CVE-2026-14818
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
9Router <= 0.4.36 - Unauthenticated RCE
9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...
CVE-2026-14818
CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...
CVE-2026-47211
CVE-2026-47211 affects Ouroboros (local-first runtime for AI coding agents). Prior to version 0.39.0, loading the project-local .env could cause arbitrary code execution when a user runs Ouroboros commands in a cloned malicious repository; execution-affecting variables like OUROBOROS_CLI_PATH and...
CVE-2026-47211
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code executi...
CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...
CVE-2026-18654
This CVE (CVE-2026-18654) affects the EMR SSH helper commands in the Amazon AWS CLI. The issue is “Key exchange without entity authentication,” enabling potential MITM attackers to intercept SSH sessions and file transfers when connecting to an EMR cluster endpoint. Affected products are AWS CLI ...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
CVE-2026-41850 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
GHSA-R5W3-XV2F-J59Q vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
CVE-2026-41848 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli...
CVE-2026-41851 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda, jenkins, apache-activemq-fips, apache-activemq, keycloak-config-cli...
CVE-2026-41852 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda, jenkins, apache-activemq-fips, apache-activemq, keycloak-config-cli...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda, jenkins, apache-activemq-fips, apache-activemq, keycloak-config-cli...