GO-2026-4610 Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli...

CVE-2026-25836

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP...

CVE-2026-25689

An improper neutralization of argument delimiters in a command 'argument injection' vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions,...

CVE-2025-48418

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7,...

BIT-DOCKER-CLI-2025-15558 Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries docker-compose.exe, docker-buildx.exe, etc. that are executed when a...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: OSV:GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469597...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.15, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.15, <=10.0.20)

@oneuptime/common NPM version =10.0.15, =10.0.15, =10.0.20 Source cves: CVE-2026-30957 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469296...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: OSV:GHSA-JW8Q-GJVG-8W4Q...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: GHSA-JW8Q-GJVG-8W4Q...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: OSV:GHSA-R5V6-2599-9G3M...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469212...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30956 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30956 Source advisory: GHSA-R5V6-2599-9G3M...

Privilege escalation using undocumented CLI command

...

Fortinet多款产品 安全漏洞

Fortinet FortiRecorder is a product of the American company Fortinet. Fortinet FortiRecorder is a web-based network video recording system management tool. Fortinet FortiMail is an email security gateway product. Fortinet FortiVoice is a unified communication and collaboration service. Several...

PT-2026-24229

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 through 7.6.3 Fortinet FortiAnalyzer Cloud versions 6.4 through 7.6.2 Fortinet FortiManager versions 6.4 through 7.6.3 Fortinet FortiManager Cloud versions 6.4 through 7.6.3 Fortinet FortiAnalyzer versions...

CVE-2026-25836: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP...

CVE-2026-25689: Improper Neutralization of Argument Delimiters in a Command

An improper neutralization of argument delimiters in a command 'argument injection' vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions,...

CVE-2025-55717: Cleartext Storage of Sensitive Information

A cleartext storage of sensitive information vulnerability CWE-312 vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder...