Unbreakable Enterprise kernel security update

5.15.0-326.222.4 - rtnetlink: advertise allmulti counter Nicolas Dichtel Orabug: 40234417 5.15.0-326.222.3 - vhost-scsi: fix page reference leak in misaligned I/O fallback Jia Jia Orabug: 40193939 - vhost-scsi: zero misaligned I/O bounce pages Shubham Antil Orabug: 40193939 - KVM: x86: Use active...

PHP 8.4.26 Remote Command Execution

PHP version 8.4.26 contains a session upload-progress handling issue that can be exploited through crafted multipart requests to execute a command. This proof of concept demonstrates the issue in a local Docker lab. https://packetstorm.news/download/238904...

NGINX 1.30.0 ngx_http_rewrite_module Heap Buffer Overflow

NGINX versions 0.6.27 through 1.30.0 contain an unauthenticated heap buffer overflow in ngxhttprewritemodule. The supplied proof of concept demonstrates command execution in an ASLR-disabled lab environment. https://packetstorm.news/download/238887...

CVE-2026-77878: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…

Control Web Panel CWP before webpanelversion 1.30 contains an OS command injection vulnerability in the loopback API database restore route /v1/restoredatabase/, where the restoreDBBackup handler passes an attacker-controlled file path from the POST body into a shell command without proper...

PT-2026-135427

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

CVE-2026-91898: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic…

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of...

PT-2026-135061

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn cli Handler. Executing a manipulation of the argument file id can lead to os command injection. The attack can be launched remotely. The exploit has...

container management system Block Create Options Command Execution

The vulnerability in the block.createoptions mechanism of the container management system and the Incus virtual machine manager is related to argument injection or modification. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands...

PT-2026-135457

OwnTone Server through 29.3 contains an sql injection vulnerability in mpd sticker find in src/mpd.c that allows unauthenticated remote attackers to inject SQL via the URI argument. Attackers can send a crafted 'sticker find song' command to the MPD listener on TCP port 6600 to bypass path...

CVE-2026-119739: Nexbox, Amlogic: The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X…

The VobSub subtitle decoder libsubvob part of the Amlogic DroidLogic SubTitleService, as shipped on Nexbox A95X Amlogic S905X TV boxes, contains an out-of-bounds write vulnerability in vobfillpixel that allows remote attackers to corrupt stack memory by sending a crafted SETCONTR command with an...

CVE-2026-119736: Petpooja Munshi: Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded…

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd

Remote Code Execution in the IModular.exe URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted imodular:// URI containing attacker-controlled command...

CVE-2026-104080: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…

Control Web Panel CWP before webpanelversion 1.30 contains an OS command injection vulnerability in the loopback API /validtoken/ route that allows unauthenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the unvalidated 'user' parameter. Attackers ca...

CVE-2026-73697: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection…

Control Web Panel CWP before webpanelversion 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpinieditor user panel module that allows attackers with access to the module to write attacker-controlled content to arbitrary paths and execute arbitrary OS commands...

PT-2026-135815

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing...

PT-2026-135795

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of...

PT-2026-135519

In the Linux kernel, the following vulnerability has been resolved: io uring/cmd: don't leave list poison in -hash node io uring cmd del cancelable uses hlist del to take a command off -cancelable uring cmd, which leaves LIST POISON1/2 behind in -hash node. Requests are recycled through the reque...

PT-2026-135667

Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 system without any credentials. Attackers with physical access and a USB-to-TTL...

PT-2026-135794

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

PT-2026-135811

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...