MAL-2026-2358 Malicious code in env-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e9b2427571d9edd96dfaefcc677578a0296dcf49d197e9482a67b794ea440e The package env-cli-express was found to contain malicious code...

com.io7m.jsay:com.io7m.jsay (>=0.0.1, <=0.0.2), com.jkoolcloud.tnt4j.streams:tnt4j-streams-jms (>=1.14.2, <=2.3.0) +5 more potentially affected by CVE-2026-32642 via org.apache.activemq:artemis-openwire-protocol (>=2.0.0, <=2.44.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version =2.0.0, =0.0.1, =1.14.2, =0.1.0, =0.1.0, =2.0.0, =2.31.1, =2.29.0, =2.44.0 Source cves: CVE-2026-32642 Source advisory: OSV:GHSA-F4GC-MWRG-Q36R...

io.undertow:undertow-http2-test-suite (1.3.0.cr1), io.undertow:undertow-servlet (1.3.0.cr1) +49 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.3.0.cr1)

io.undertow:undertow-core MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr1 - io.undertow:undertow-servlet 1.3.0.cr1 -...

EUVD-2025-208939

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519

The CVE-2025-15519 affects TP-Link Archer NX200/NX210/NX500/NX600 devices, where an improper input handling in the modem-management CLI allows authenticated administrators to inject commands that are executed by the OS. This can impact confidentiality, integrity, and availability as described. No...

CVE-2025-15518 Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2026-3587 Hidden CLI Function Allows Root Access

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device...

Siemens APE1808 Incorrect Provision of Specified Functionality (CVE-2025-58325)

An Incorrect Provision of Specified Functionality vulnerability CWE-684 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands. This plugin only works with...

Siemens APE1808 Improper Neutralization of Special Elements used in an OS Command (CVE-2025-4230)

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. This plugin only works with...

PT-2026-27066

Name of the Vulnerable Software and Affected Versions WAGO Lean Managed Switch 852-1812 and other WAGO products versions prior to a fix for CVE-2026-3587 Description An unauthenticated remote attacker can exploit a hidden function within the Command Line Interface CLI prompt to bypass the...

TP-Link’s various products have security vulnerabilities

TP-LINK Archer is a series of routers produced by TP-LINK Corporation. Several TP-Link products have security vulnerabilities. These vulnerabilities stem from improper handling of Modem Management CLI command inputs. This could allow authenticated attackers with administrative privileges to execu...

TP-Link’s various products have security vulnerabilities

TP-LINK Archer is a series of routers produced by TP-LINK Corporation. Several TP-Link products have security vulnerabilities. These vulnerabilities stem from improper handling of wireless control management CLI commands. This could allow authenticated attackers with administrative privileges to...

CVE-2025-15518: Improper Neutralization of Special Elements used in an OS Command

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

CVE-2025-15519: Improper Neutralization of Special Elements used in an OS Command

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

au.csiro.pathling:encoders (>=5.1.0, <=9.5.0), au.csiro.pathling:fhir-server (>=5.3.1, <=7.2.0) +323 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (>=0.0.1, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.2.1 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.7.7, <=7.4.5) +209 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=5.6.22, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =5.6.22, =3.4.0, =5.7.7, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =6.2.0, =6.8.0, =6.4.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.7, =6.8.0 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=7.4.5) +223 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =4.0.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.4.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-converter (>=8.4.0, <=8.8.2) +109 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.model (>=6.5.25, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.model MAVEN version =6.5.25, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...