Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

GHSA-RPV3-6645-2VQC Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

GHSA-P47F-322F-WHFH vulnerabilities

Vulnerabilities for packages: kafbat-ui, nextflow, cassandra, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, keycloak-config-cli, ontop-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, airbyte-server, nacos-docker, trino,...

GHSA-P47F-322F-WHFH vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, kserve-modelmesh, keycloak-config-cli, management-api-for-apache-cassandra-5.0, akhq, cassandra-reaper, nextflow, dependency-track, sonarqube, cassandra, trino, zookeeper...

SUSE CVE-2026-13769

Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most systems may allow other local users on the same host to read credentials written by certain CLI subcommands...

EUVD-2026-41463

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4Update1, 12.0 up to and including 12.12 and 2025....

CVE-2026-13053: Out-of-bounds Write

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2026-13053

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

CVE-2026-13053

WatchGuard Fireware OS has an authenticated out-of-bounds write vulnerability in the CLI command handler (CVE-2026-13053). A privileged, authenticated attacker could trigger code execution via a crafted CLI input. Affected versions include Fireware OS 11.0–11.12.4_Update1, 12.0–12.12, and 2025.1–...

CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIMCP-17817921...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.37.0, <=0.132.2), @grackle-ai/server (>=0.37.0, <=0.132.2) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.2)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPOWERLINE-17817937...

@grackle-ai/cli (>=0.37.0, <=0.132.1), @grackle-ai/server (>=0.37.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.1)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority

Summary OpenClaw hook ingress can start automated agent runs using a configured hook token. In affected releases, a hook-triggered run could select a bundled CLI backend that received owner-scoped MCP loopback authority instead of a scope appropriate for hook ingress. This issue affects the...

CVE-2026-8482

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

CVE-2026-8482 Information leak in NSRPC client history

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

CVE-2026-8482: Insertion of Sensitive Information into Log File

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

CVE-2026-54074 @tinacms/cli: Remote Code Execution via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels

Tina is a headless content management system. @tinacms/cli versions prior to 2.4.3 contain a Remote Code Execution vulnerability in the Forestry-to-Tina migration command. The internal helper addVariablesToCode unquotes any value matching the marker "TINAINTERNAL:::.?:::" inside the stringified...