PT-2026-108978

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

CVE-2026-55797: Improper Neutralization of Special Elements used in an OS Command

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port...

JetBrains TeamCity < 2025.11.8 / 2026.x < 2026.1.4 / 2026.2.x < 2026.2 (CVE-2026-100254) (Windows)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or prior to 2026.1.4, or prior to 2026.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers v...

Linux Distros Unpatched Vulnerability : CVE-2026-93858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH...

Linux Distros Unpatched Vulnerability : CVE-2026-106057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double...

SonicWall SMA 1000 Series <= 12.4.3-03526 / 12.5.x <= 12.5.0-02952 Multiple Vulnerabilities (SNWLID-2026-0017)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote,...

ImageMagick 6.9.2-10 Command Injection

ImageMagick version 6.9.2-10 contains command injection through unescaped URLs passed to delegates. The included proof of concept provides a PHP image-upload interface that invokes ImageMagick on supplied files. https://packetstorm.news/download/235008...

PostgreSQL 10.7 COPY from Program Command Execution

PostgreSQL version 10.7 with default superuser credentials demonstrates COPY FROM PROGRAM execution of an operating-system command as the database server user. https://packetstorm.news/download/234985...

Spring Security OAuth 2.0.8 Remote Command Execution

Spring Security OAuth version 2.0.8 allows authenticated remote command execution when its whitelabel error view evaluates a malicious responsetype parameter as a Spring Expression Language expression. Included proof of concept generates the expression. https://packetstorm.news/download/234976...

VulnCheck KEV: CVE-2026-105134

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with...

RHEL 8 : libxml2 (RHSA-2026:79119)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79119 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2026_77359)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677359 advisory. vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 Tenable has extracted the preceding description block directly from...

Splunk Enterprise 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.2.x prior to 10.2.7 or 10.4.x prior to 10.4.3. Splunk Enterprise 9.4.x and 10.0.x are not affected. It is, therefore, affected by a missing authentication vulnerability as referenced in the SVD-2026-1001 advisory. An...

CVE-2026-108159: Improper Neutralization of Input During Web Page Generation

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

PT-2026-108985

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.11.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc1 and earlier Description The Argo CD repo-server is subject to command injection when cloning, testing, ...

Supervisord 3.3.2 XML-RPC Remote Command Execution

Supervisord version 3.3.2 contains an XML-RPC method-resolution flaw that allows remote command execution through crafted requests. The included proof of concept executes a supplied command and retrieves its output from the Supervisord log. https://packetstorm.news/download/234970...

OpenTSDB 2.4.0 Gnuplot Command Injection

OpenTSDB versions through 2.4.0 contain a command injection vulnerability in the graph endpoint yrange parameter, allowing Gnuplot system execution. A proof of concept is included. https://packetstorm.news/download/234990...

GNU Bash 4.3.0 Shellshock Remote Command Injection

GNU Bash version 4.3.0 contains the Shellshock remote command injection vulnerability when Apache CGI exposes attacker-controlled request headers as environment variables. This proof of concept supplies a Docker-based Apache CGI lab with vulnerable and unaffected scripts...

Cisco Application Policy Infrastructure Controller API Command Injection (cisco-sa-apic-cmdinj-L6VR4E7)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A command injection vulnerability exists in the web-based management API due to insufficient input validation of user-controlled command arguments. An authenticated,...

Oracle Linux 8 : ruby:2.5 (ELSA-2026-73519)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73519 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 - Fix REXML ReDoS vulnerability. CVE-2024-49761...