CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 are vulnerable to command execution due to an insecure default configuration in the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL ). The FURLRequestFilter is empty by default, allowing all URL schemes. On Windows, this trigge...

EUVD-2026-100753

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...

CVE-2026-85714: Improper Control of Generation of Code

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

Linux Distros Unpatched Vulnerability : CVE-2026-108546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishin...

CVE-2026-103929: Improper Neutralization of Special Elements used in an OS Command

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml settings from an untrusted local project before trust approval and striplocalonlysettings removes only fields marked globalonly. The unixdefaultfileshellargs,...

PT-2026-113608

Name of the Vulnerable Software and Affected Versions Unreal Engine versions prior to 5.8.1 Description The software contains an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, allowing a...

PT-2026-114298

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKER ARGS a...

CVE-2026-86002: Improper Neutralization of Directives in Dynamically Evaluated Code

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

PT-2026-113639

Improper neutralization of special elements in the NetBird client SSH configuration manager client/ssh/config/manager.go in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide...

Splunk Enterprise 10.4.2 Patroni REST API Remote Command Execution

Splunk Enterprise versions 10.2.0 through 10.2.6 and 10.4.0 through 10.4.2 contain a missing authentication flaw in the Patroni REST API that permits unauthenticated network users to execute operating-system commands on search head cluster members. https://packetstorm.news/download/235638...

simple-git 3.36.0 Command Execution

simple-git versions through version 3.36.0 contain a command execution issue that bypasses unsafe operation checks through abbreviated Git long options...

PT-2026-114194

🚨 CVE-2026-33789 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP...

PT-2026-114218

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.8.6 Description The pre-installation endpoint "web/instalador/instalador.php" is accessible before the config.php file is created and processes unauthenticated POST data. During the Linux reinstall process, a speciall...

CVE-2026-59774: Improper Limitation of a Pathname to a Restricted Directory

Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files...

CVE-2026-54702: Exposed Dangerous Method or Function

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

CVE-2026-110631: Initialization of a Resource with an Insecure Default

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

CVE-2026-110846: Incorrect Behavior Order: Validate Before Canonicalize

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

CVE-2026-14765: Initialization of a Resource with an Insecure Default

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

PT-2026-116225

Уязвимость модуля Advanced Malware Protection AMP средства защиты Cisco Secure Email Gateway связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на запись произвольных файлов и выполнить произвольные...

phpwcms 1.12.3 Shell Upload

phpwcms version 1.12.3 and prior affected releases contain an unauthenticated unrestricted upload issue in public Form content. A proof of concept demonstrates uploading a .phtml marker that executes when the server maps that extension to PHP. https://packetstorm.news/download/235633...