PT-2026-107511

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-107481

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

PT-2026-107491

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 affected versions not specified Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. This allows a remote authenticated attacker with administrator...

PT-2026-107483

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

PT-2026-107484

Name of the Vulnerable Software and Affected Versions GitAhead versions prior to 2.7.2 Description On macOS, a command injection issue exists where repository filenames are interpolated without proper escaping into the Show in Finder AppleScript. An attacker can commit a file with a path containi...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

EUVD-2025-211046

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

EUVD-2025-211049

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70518

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

UBUNTU-CVE-2026-105841

lrzsz before 0.13.0 contains an OS command injection vulnerability in...

CVE-2026-105841

lrzsz before 0.13.0 contains an OS command injection vulnerability in...

Linux Distros Unpatched Vulnerability : CVE-2026-105841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

[SECURITY] [DSA 6548-1] node-shell-quote security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...

CVE-2026-79815

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79803

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-102160

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...