UBUNTU-CVE-2026-79678

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

The vulnerability of the Util-linux command-line utility suite relates to deficiencies in handling error situations, allowing attackers to exploit their privileges.

The vulnerability of the Util-linux command-line utility package is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the command-line interface of data storage software Infinispan allows attackers to exploit it to disclose sensitive information.

The vulnerability of the command-line interface of data storage software called Infinispan is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

PT-2026-86172

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit 4472a31 Description A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. This occurs because several command-line handling paths write an...

...[ More ]

A stack-based buffer overflow vulnerability exists in the htpasswd utility bundled with thttpd. The vulnerability occurs due to unsafe copying of a user-supplied command-line argument into a fixed-size stack buffer without proper bounds checking.Specifically, the program copies the username...

[SECURITY] Fedora 43 Update: exiv2-0.28.9-1.fc43

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

EUVD-2026-63663

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection...

GHSA-W878-PJ84-3J5V Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...

CVE-2026-73767

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73753

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73754

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

EUVD-2026-69645

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73782

CVE-2026-73782 is an unauthenticated format string vulnerability in the command line interface of HPE AOS-CX . Successful exploitation allows execution of arbitrary code as a privileged user on the underlying operating system, leading to full compromise of confidentiality, integrity, and availabi...

CVE-2026-73782 Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73782 Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73776 Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...

CVE-2026-73776 Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...