CVE-2026-110858

GitPython versions 3.1.30 before 3.2.0 are vulnerable to remote code execution via a command injection flaw in the Remote.pull() function. The root cause is that the unsafe-option guard only inspects keyword arguments and fails to validate the positional refspec . An attacker who controls the ref...

CVE-2026-110846

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

CVE-2026-110846 n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

CVE-2026-110846 n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

CVE-2026-110846

The automation tool n8n versions before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint. The root cause is a logic error where the system performs Send-and-Wait validation before normalizing an alternate node reference form (CWE-180). An attacker posses...

CVE-2026-110846 n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

OTinstaller

OTinstaller Install, run, update, and remove open-source command line tools by name. You pick a tool from a list. OTinstaller downloads it into its own folder, runs it, and saves the output. You do not learn a different install method for each tool. otinstaller is published on PyPI version 0.0.1...

CVE-2026-0320

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-100232

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...

CVE-2026-0313

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...

CVE-2026-0313

Palo Alto Networks Cortex XSOAR and Cortex XSIAM are affected by a command injection vulnerability within the OS Query content pack . This flaw allows an authenticated administrator to execute arbitrary OS commands on remote endpoints. To mitigate this issue without an immediate upgrade, users ca...

CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...

EUVD-2026-101674

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...

CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...

CVE-2026-54702

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the crossnote namespace, and invokes...

CVE-2026-0320

Palo Alto Networks PAN-OS software contains a command injection vulnerability (CWE-78) that allows an authenticated administrator to bypass system restrictions and execute arbitrary commands as a root user . This issue affects PA-Series and VM-Series firewalls, as well as Panorama (virtual and M-...

CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

EUVD-2026-101631

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-100232

A post-authentication OS Command Injection vulnerability exists in the SonicWall Network Security Manager (NSM) on-prem (supporting VMWare, Hyper-V, Azure, and KVM). Due to improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary c...