CVE-2026-20040

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

CVE-2026-31975

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload and interpolated into...

@oneuptime/cli (>=10.0.5, <=10.0.34), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-33396 via @oneuptime/common (>=7.0.141, <=10.0.34)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-33396 Source advisory: MEND:CVE-2026-33396...

PT-2026-28264

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33671 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33671 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-33699 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-33699 Source advisory: OSV:GHSA-87MJ-5GGW-8QC3...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840331...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: GHSA-8G29-8XWR-QMHR...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8G29-8XWR-QMHR...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: OSV:GHSA-5J35-XR4G-VWF4...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840037...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: GHSA-5J35-XR4G-VWF4...

@grackle-ai/cli (>=0.0.2, <=0.70.3) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.3)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.3 Source cves: unknown CVE Source advisory: OSV:GHSA-3MJM-X6GW-2X42...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840038...

@grackle-ai/cli (>=0.0.2, <=0.70.3) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.3)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.3 Source cves: unknown CVE Source advisory: GHSA-3MJM-X6GW-2X42...