CVE-2026-73170

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the Modbus CSV import workflow of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can craft a malicious imported file to achieve arbitrary Lua code execution ...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, affecting firmware V1.06.01 . A remote authenticated attacker with high privileges can execute arbitrary code on the device, including O...

EUVD-2026-80733

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

Exploit for Code Injection in Agentfront Enclave

CVE-2026-22686-...

PT-2026-93717

Name of the Vulnerable Software and Affected Versions Advantech EKI-1242IEIMS version V1.06.01 Description A code injection issue exists in the web management interface. This flaw allows a remote authenticated attacker to execute arbitrary code on the device, including operating system commands...

CVE-2026-73166: Improper Control of Generation of Code

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

PT-2026-93836

Name of the Vulnerable Software and Affected Versions MindsDB affected versions not specified Description A code injection issue exists in the OpenBBtable component, which can lead to remote code execution. Remote code execution is a security flaw that allows an attacker to run arbitrary commands...

CVE-2026-85469: Reliance on Insufficiently Trustworthy Component

A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...

PT-2026-94091

Name of the Vulnerable Software and Affected Versions quay-builder-qemu affected versions not specified Description A flaw exists where the release workflow uses the upstream Noelware/docker-manifest-action pinned to a mutable branch. A remote attacker could compromise this upstream action to...

TencentOS Server 4: python-sqlparse (TSSA-2026:1008)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1008 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2026-73170: Improper Control of Generation of Code

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a...

Arista Networks EOS P4Runtime Arbitrary Code Execution (SA0174)

The version of Arista Networks EOS running on the remote device is affected by a code injection vulnerability as referenced in security advisory SA0174. - An unauthenticated P4Runtime Programming Protocol-Independent Packet Processors Runtime client can achieve arbitrary code execution under...

CVE-2026-91719

A code injection flaw was found in the XML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542115030...

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

DEBIAN-CVE-2026-91719

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91719

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91719

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-91719

CVE-2026-91719 is a code injection flaw in the XML component of Google Chrome (Chromium). A remote attacker could leverage a crafted HTML page to bypass the web origin policy . Affected versions are Google Chrome prior to 153.0.8010.47 . Chromium rates this Low severity, while NVD assigns a CVSS ...