PT-2026-111830

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.54.1 Description A command approval bypass exists in the parseCommandLine function. This issue allows attackers to auto-approve arbitrary shell commands by placing a command substitution in the command position. By...

PT-2026-113545

Name of the Vulnerable Software and Affected Versions Citrix UniconOS versions prior to 2607.2 CR Citrix UniconOS versions prior to 2603 LTSR CU2 Description An issue in Citrix UniconOS allows for persistent command execution. Recommendations Update Citrix UniconOS to version 2607.2 CR or later...

PT-2026-111604

Name of the Vulnerable Software and Affected Versions CVFS affected versions not specified Description An input validation issue exists that allows for command execution. Recommendations Update CVFS to the resolved maintenance release...

PT-2026-111311

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN592AX6 version 250422 Description A flaw in the wmapd Daemon allows for remote OS command injection. The issue resides within the system function, enabling an attacker to execute arbitrary operating system commands without...

CVE-2026-104585

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection within the /download_data/ and /api/v1/scan endpoints. The flaw specifically affects the Dynamic Analyzer ADB integration module . This vulnerability allows for the execution of arbitrary commands on the underlying system...

CVE-2026-96951: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-111824

Name of the Vulnerable Software and Affected Versions Mistral Vibe versions prior to 2.25.4 Description A command permission gate bypass allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value. This technique evades detection by...

CVE-2026-109429: Interpretation Conflict

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as...

CVE-2026-55562: Improper Neutralization of Input During Web Page Generation

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-104585

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

CVE-2026-104585: Improper Neutralization of Special Elements used in a Command

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

PT-2026-111779

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

CVE-2026-109110: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...

PT-2026-113153

Name of the Vulnerable Software and Affected Versions Microsoft Windows Shell versions prior to October 13, 2026 Windows 10 affected versions not specified Windows 11 versions 23H2 through 26H2 Windows Server versions 2012 R2 through 2025 Description Improper neutralization of special elements us...

PT-2026-111728

Name of the Vulnerable Software and Affected Versions Cronicle versions prior to 0.9.119 Description An issue exists in the administrator Activity Log within htdocs/js/pages/admin/Activity.js where the item.user.full name value is concatenated into HTML without proper encoding via encode entities...

PT-2026-111968

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /download data/, /api/v1/scan, Dynamic Analyzer ADB integration module...

dockerd Go-Archive Arbitrary File Write

The vulnerability of the dockerd daemon in the Go-Archive library of the Docker Desktop command-line interface for developing and deploying container applications, as well as the Docker Compose tool for managing multi-container applications, is related to an incorrect definition of symbolic...

Cisco Application Policy Infrastructure Controller Web Interface Command Execution

The vulnerability of the Cisco Application Policy Infrastructure Controller APIC web interface management interface is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

Cisco NX-OS Python Sandbox Bypass Command Execution

The vulnerability of the built-in Python interpreter in the Cisco NX-OS operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms and execute arbitrary commands...