PT-2026-102868

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description A command injection issue exists in the CLI of the affected devices. An unauthenticated adjacent attacker can execute arbitrary commands as a privileged user on the...

PT-2026-102799

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists in the CLI certificate SMIME recipient deletion functionality that allows an authenticated privileged CLI user to perform command injection. This can lead to the execution o...

PT-2026-102800

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Command injection exists in the certificate export CLI functionality. A privileged authenticated CLI user can exploit this weakness to execute arbitrary commands with root privileges...

CVE-2026-84436: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

Amazon Linux 2023 : awscli-2 (ALAS2023-2026-3133)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3133 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most...

jo-cli (1.0.2) potentially affected by CVE-2026-102278 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-102278 Source advisory: SNYK:JS-BRACEEXPANSION-20244948...

jo-cli (1.0.2) potentially affected by CVE-2026-102276 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-102276 Source advisory: SNYK:JS-BRACEEXPANSION-20244952...

jo-cli (1.0.2) potentially affected by CVE-2026-102277 via brace-expansion (3.0.0)

brace-expansion NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on brace-expansion and may be impacted: - jo-cli 1.0.2 Source cves: CVE-2026-102277 Source advisory: SNYK:JS-BRACEEXPANSION-20244950...

@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +109 more potentially affected by CVE-2026-85024 via undici (>=6.25.0, <=6.28.0)

undici NPM version =6.25.0, =2.7.0, =5.52.1-fa.2, =5.52.1-fa.5, =0.1.0-rc.27, =0.1.0-rc.27, =0.0.29, =1.0.7, =2.4.0, =5.3.0-beta.0, =0.1.55-beta.2, =1.3.0, =1.3.0, =1.3.0, =1.0.0, =1.0.5 and more Source cves: CVE-2026-85024 Source advisory: OSV:GHSA-3WWX-PV8P-Q78V...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +115 more potentially affected by CVE-2026-88932 via multer (>=2.2.0, <=2.3.0)

multer NPM version =2.2.0, =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =0.0.1, =5.7.5, =11.1.29-depup.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =1.2.43 and more Source cves: CVE-2026-88932 Source advisory: OSV:GHSA-3PPH-FPJX-JG34...

CVE-2026-87969

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...

CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...

CVE-2026-87969

A WatchGuard AP OS command injection vulnerability exists within the diagnostic CLI . An authenticated administrator can execute arbitrary operating system commands by providing crafted input. While the technical root cause is not detailed beyond the input handling flaw, the impact allows for ful...

EUVD-2026-88363

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...

CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...

GO-2026-6529 AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets in github.com/anycable/anycable-go

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets in github.com/anycable/anycable-go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If...

DEBIAN-CVE-2026-87798

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

CVE-2026-87798

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

UBUNTU-CVE-2026-87798

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...