CVE-2026-20017: Execution with Unnecessary Privileges

A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device. This...

CVE-2026-20044: Improper Privilege Management

A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, local attacker to perform arbitrary commands as root. This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker...

PT-2026-22969

A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to craft Lua code that could be used on the underlying operating...

CVE-2026-20064: NULL Pointer Dereference

A vulnerability in of Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service DoS condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a...

PT-2026-23022

A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device. This...

PT-2026-22939

Name of the Vulnerable Software and Affected Versions Docker CLI versions through 29.1.5 Docker Compose versions 2.31.0 through 5.0.0 Description The Docker CLI for Windows searches for plugin binaries in C:ProgramDataDockercli-plugins, a directory that does not exist by default. An attacker with...

GHSA-XC68-RRQC-QGQ3 MCP NMAP Server has an Injection vulnerability

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

CVE-2026-3484

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

CVE-2026-3484: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-28804 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-28804 Source advisory: OSV:GHSA-9M86-7PMV-2852...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, longhorn-manager, k6, tflint-fips, falcosidekick-fips, prometheus-adapter, zitadel, grafana-pyroscope, azurefile-csi, kyverno-fips, percona-server-mongodb-operator, tekton-chains, sftpgo, packer, datadog-operator-fips,...

ch.acanda.maven:code-analysis-maven-plugin (1.5.0), com.eventoframework:evento-cli (>=ev1.4.1, <=ev1.15.5) +66 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.55.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - ch.acanda.maven:code-analysis-maven-plugin 1.5.0 - com.eventoframework:evento-cli =ev1.4.1, =ev1.4.1,...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-28351 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-28351 Source advisory: OSV:GHSA-F2V5-7JQ9-H8CG...

indexdoc-converter (>=0.2.4, <=0.2.7), pdd-cli (>=0.0.70, <=0.0.250) +2 more potentially affected by CVE-2026-28231 via pillow-heif (>=1.1.0, <=1.2.0)

pillow-heif PYPI version =1.1.0, =0.2.4, =0.0.70, =0.4.0, =0.0.11, =0.0.33 Source cves: CVE-2026-28231 Source advisory: SNYK:PYTHON-PILLOWHEIF-15426536...

indexdoc-converter (>=0.2.4, <=0.2.7), pdd-cli (>=0.0.70, <=0.0.250) +2 more potentially affected by CVE-2026-28231 via pillow-heif (>=1.1.0, <=1.2.0)

pillow-heif PYPI version =1.1.0, =0.2.4, =0.0.70, =0.4.0, =0.0.11, =0.0.33 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2258...

imgtools-cli (>=1.0.3, <=1.0.8) potentially affected by CVE-2026-28231 via pillow-heif (0.9.0)

pillow-heif PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow-heif and may be impacted: - imgtools-cli =1.0.3, =1.0.8 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2258...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the clihistory feature. An attacker can access sensitive command history and API request/response data by reading the history database file if it is created with default permissions on a multi-user Unix...

aiida-project (0.7.0), airbyte (>=1.0.0rc24, <=1.0.0rc34) +73 more potentially affected by CVE-2025-13327 via uv (>=0.1.45, <=0.9.5)

uv PYPI version =0.1.45, =1.0.0rc24, =0.112.0, =0.1.0, =0.1.2, =1.0.3, =0.5.0.dev0, =1.0.0, =11.5.1, =0.0.24, =1.2.4, =1.2.5 and more Source cves: CVE-2025-13327 Source advisory: OSV:PYSEC-2026-2295...

GO-2026-4556 Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api

Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api...

PT-2026-50579

Уязвимость параметра cli history инструмента командной строки для взаимодействия с сервисами Amazon Web Services AWS CLI связана с использованием имени с неправильной ссылкой. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...