PT-2026-83789

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can ...

PT-2026-83731

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

PT-2026-83790

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve mgr.cgi. This manipulation of the argument f dev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

PT-2026-83802

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the R7WebsSecurityHandler function located in the /goform/ate file. Recommendations At the moment,...

PT-2026-83803

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description A security flaw in the Telnet Handler component allows remote attackers to bypass authentication. The issue resides within an unknown function of the '/goform/telnet' endpoint. Recommendations At the...

PT-2026-83764

Name of the Vulnerable Software and Affected Versions klaussilveira GitList version 2.0.0 Description An OS command injection flaw exists in the Git Command Line component. The issue resides within the getDefaultBranch function located in the src/SCM/System/Git/CommandLine.php file, which allows ...

PT-2026-83847

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

EUVD-2026-68877

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...

PT-2026-83850

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp setPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

PT-2026-83771

Name of the Vulnerable Software and Affected Versions ZTE ZXDU68 S202 affected versions not specified Description Command injection flaws allow attackers to delete core system runtime files, which leads to the crash and paralysis of the monitoring module. Additionally, attackers can obtain root...

PT-2026-84055

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2110 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcounter: serialize reset with spinlock CVE-2026-45897 In the Linux kernel, the following vulnerability has bee...

Linux Distros Unpatched Vulnerability : CVE-2026-82853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is...

SUSE SLED15 / SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3815-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3815-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. CVE-2026-53005 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:3830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3830-1 advisory. - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through Augu...

Linux Distros Unpatched Vulnerability : CVE-2026-77650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency...

Important: postgresql17

Issue Overview: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the...

Amazon Linux 2 : vim, --advisory ALAS2-2026-3883 (ALAS-2026-3883)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3883 advisory. Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.14)

The version of AHV installed on the remote host is prior to 10.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.14 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...