CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to...

CVE-2026-111322

Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to...

CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to...

EUVD-2026-101154

mise permits untrusted local configuration to override default shell arguments...

GHSA-G74G-RG72-J2P3 mise permits untrusted local configuration to override default shell arguments

Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...

mise permits untrusted local configuration to override default shell arguments

Summary Untrusted local .mise.toml settings can set the shell interpreter args unix/windows defaultinline / defaultfile shellargs, yielding arbitrary command execution, because those command-interpreter settings were not added to the globalonly denylist the CVE-2026-55448 fix relies on. Code...

CVE-2026-55240

Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString in src/server/utils/template.ts passes survey feedTemplate and monitor notification templates to lodash template, while the default evaluate pattern remains enabled. A workspace...

CVE-2026-111219

Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making...

EUVD-2026-102331

Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making...

CVE-2026-111218 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters

Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a...

CVE-2026-110236

A flaw was found in KDE Dolphin. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted folder names containing shell metacharacters. When a victim double-clicks the folder view background, the application fails to properly escape the path parameter,...

CVE-2026-55453

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quotestring function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before reportattr writes the value to the...

CVE-2026-55240

The Tianji open-source analytics and monitoring platform is vulnerable to Remote Code Execution (RCE) in versions prior to 1.31.29 . The root cause is that the formatString() function in src/server/utils/template.ts passes survey and monitor notification templates to the lodash template function ...

CVE-2026-58390

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client commonname into data-common-name attributes without quote-safe encodin...

CVE-2026-57155

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

WHEELS.DEV: Wheel commands injection vulnerability

WHEELS.DEV: Wheels 4.0.0 to 4.1.2 versions had a command injection vulnerability. This vulnerability stemmed from insufficient validation or escaping of values and package contents provided by callers. It allowed for the introduction of malicious inputs through CI variables, branch names, package...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.34 have an authorization vulnerability. This vulnerability stems from the lack of mandatory authentication during WebSocket upgrade requests at the browser container endpoint/api/containers//exec. This allows unverified attackers to initiate raw WebSocket...

Astra Linux – Vulnerability in xterm

xterm before 375 allows code execution via font ops. For example, an OSC 50 response may trigger Ctrl-g, thereby leading to command execution within the vi line-editing mode of Zsh. NOTE: Font ops are not allowed in the default configurations of some Linux distributions for xterm...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS commands to be executed when a user opened a crafted file. The complete, guitabtooltip, and printheader options lacked the PMLE flag, enabling a modeline to be execute...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to an unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitl...