94465 matches found
CVE-2026-0320
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-0313
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...
CVE-2026-0313
Palo Alto Networks Cortex XSOAR and Cortex XSIAM are affected by a command injection vulnerability within the OS Query content pack . This flaw allows an authenticated administrator to execute arbitrary OS commands on remote endpoints. To mitigate this issue without an immediate upgrade, users ca...
CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...
EUVD-2026-101674
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...
CVE-2025-9090
CVE-2025-9090 Author: Byte Reaper Description This exploit targets CVE-2025-9090 , a command injection vulnerability in the Tenda AC20 v16.03.08.12 router. The flaw is in the endpoint /goform/telnet, which can be triggered remotely. When accessed, it starts the Telnet service on the device, openi...
CVE-2026-0320
Palo Alto Networks PAN-OS software contains a command injection vulnerability (CWE-78) that allows an authenticated administrator to bypass system restrictions and execute arbitrary commands as a root user . This issue affects PA-Series and VM-Series firewalls, as well as Panorama (virtual and M-...
CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...
EUVD-2026-101631
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-100232
A post-authentication OS Command Injection vulnerability exists in the SonicWall Network Security Manager (NSM) on-prem (supporting VMWare, Hyper-V, Azure, and KVM). Due to improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary c...
EUVD-2026-101630
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
citrix-netscaler-cve-2026-88771-iocs
Citrix NetScaler CVE-2026-88771: Indicators of Compromise Indicators of Compromise IoCs observed by watchTowr Intel during in-the-wild exploitation of CVE-2026-88771, an unauthenticated command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway. Indicators in this repository we...
CVE-2026-110536
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
CVE-2026-54525
The Markdown Preview Enhanced extension for Visual Studio Code is vulnerable to OS Command Injection prior to version 0.8.28 . The root cause is the improper neutralization of special elements in the preview-link handling logic, where a decoded, Markdown-controlled link target is passed to a Wind...
CVE-2026-54525 Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes childprocess.exec with the start command. When a Windo...
CVE-2026-54525 Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows
Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes childprocess.exec with the start command. When a Windo...
EUVD-2026-101590
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
CVE-2026-110536
The D-Link DIR-868L (version 2.01b05 ) is vulnerable to an OS command injection vulnerability within the HNAP CGI Handler component. Specifically, the vulnerability exists in the system function of the /htdocs/cgibin file. An attacker can achieve remote code execution by manipulating the SOAPACTI...