emacs security update

An update is available for emacs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provid...

RLSA-2026:84591 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

RLSA-2026:84594 Moderate: environment-modules security update

The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "modul...

environment-modules security update

An update is available for environment-modules. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The environment-modules packages provide dynamic modification of...

CVE-2025-7769

CVE-2025-7769 – Remote Command Injection in mobileapi Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE‑2025‑7769 , a critical remote Command Injection vulnerability found in Tigo Energy CCA appliances exposing the /cgi-bin/mobileapi endpoint. The vulnerability is...

EUVD-2026-104968

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function settable of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launche...

CVE-2026-113389

The DrayTek Vigor2960 (version 1.5.1.6 Revision 8218) is vulnerable to command injection in the CGI Process component. The flaw exists within the set_table function of the /cgi-bin/mainfunction.cgi file, where improper handling of the sectiontype argument allows for remote command execution. Whil...

CVE-2026-113389 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function settable of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launche...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery SSRF Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a...

CVE-2026-113378

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

CVE-2026-43850

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system...

CVE-2026-113378

A security flaw in mcollina mcp-ripgrep (up to version 0.4.0 ) allows for OS command injection within the Advanced Search Tool component. The vulnerability exists in an unknown function of the src/index.ts file, where the manipulation of the fileType argument leads to command injection due to a C...

CVE-2026-113378 mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

EUVD-2026-104861

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

CVE-2026-113378 mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command injection. The attack requires a local approach. The exploit has...

CVE-2026-43850

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system...

EUVD-2026-104851

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system...

CVE-2026-43850

A command injection vulnerability exists that could allow an authenticated attacker to achieve root-level code execution on the system. No specific software products, versions, or root causes are provided in the documents. Exploitation details are not provided.

CVE-2026-113403

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server...

CVE-2026-113403

ArmorX Spam , developed by ArmorX Global Technology , contains a Command Injection vulnerability (CWE-93). This flaw allows authenticated remote attackers to inject crafted commands via a specific parameter. Successful exploitation enables the attacker to upload malicious code to the server. No s...