EulerOS 2.0 SP13 : sg3_utils (EulerOS-SA-2026-4197)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

VulnCheck KEV: CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

PT-2026-110936

Name of the Vulnerable Software and Affected Versions Continue CLI @continuedev/cli versions prior to 1.5.48 Description A permission bypass exists where the Bash allow-rules use prefix matching on the entire command string. This allows an attacker to execute unapproved commands by chaining them...

EulerOS 2.0 SP13 : dracut (EulerOS-SA-2026-4134)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

EulerOS 2.0 SP13 : dracut (EulerOS-SA-2026-4043)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

Tozed ZLT X300 6.01.3 IPPingDiagnostics Command Injection

Tozed ZLT X300 versions 6.01.0 through 6.01.3 contain an OS command injection vulnerability in the IPPingDiagnostics handler through the Host argument...

PT-2026-110868

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description Command injection is possible via remote manipulation of the readE2P argument within a function in the /goform/formWlanMP endpoint. This issue affects products that are no longer supported by the...

CVE-2026-18529: Improper Neutralization of Special Elements used in an OS Command

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...

PT-2026-110512

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This manipulation of the argument command causes os command injection. The attack may be...

CVE-2026-108918: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1791331932)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1791331932 advisory. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands...

WS-2026-0125

Vim 9.0.1945 before 9.2.1178: the R Markdown syntax file runtime/syntax/rmd.vim passes fenced-code-block language names taken from the buffer to globpath after insufficient sanitization, allowing command execution when a crafted .Rmd file is opened with syntax highlighting. GHSA-x2w5-pj55-7hpc...

CVE-2026-109570: Missing Authentication for Critical Function

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC...

CVE-2026-108917: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-82108: Improper Control of Generation of Code

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

PT-2026-111100

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

PT-2026-110946

Name of the Vulnerable Software and Affected Versions Fire-Boltt BSW013 firmware versions prior to V0.0.9 Description Missing authentication allows unpaired attackers within Bluetooth range to inject notifications by writing to the proprietary BLE command characteristic. Attackers can craft...

PT-2026-110921

Name of the Vulnerable Software and Affected Versions GPT-SoVITS versions prior to 20250606v2pro Description An OS command injection flaw exists in the tools/uvr5/vr.py file. Unauthenticated attackers can execute arbitrary commands with the privileges of the server user by entering shell...

PT-2026-110823

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...

TencentOS Server 4: gdb (TSSA-2026:1081)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1081 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...