Oracle WebLogic Server 12.2.1.3 Remote Command Execution

Oracle WebLogic Server version 12.2.1.3 contains an authentication bypass that can be chained with a console command-execution issue. A proof of concept environment and exploitation details are provided. https://packetstorm.news/download/234965...

PT-2026-108757

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/ec host cmd/backends/ec host cmd backend shi ite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-in msg and only afterwards checked the protocol version and the derived packet...

PT-2026-118599

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.7.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc0 through 3.6.0-rc1 Description Kustomize passes ref or version query values from remote resource, base, o...

Linux Distros Unpatched Vulnerability : CVE-2026-93858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Mistral through 23.0.0, the std.sshproxied action passes a caller-supplied proxycommand value directly to paramiko.ProxyCommand before any SSH...

Linux Distros Unpatched Vulnerability : CVE-2026-106057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double...

PT-2026-108978

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

CVE-2026-55797: Improper Neutralization of Special Elements used in an OS Command

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port...

JetBrains TeamCity < 2025.11.8 / 2026.x < 2026.1.4 / 2026.2.x < 2026.2 (CVE-2026-100254) (Windows)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or prior to 2026.1.4, or prior to 2026.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers v...

SonicWall SMA 1000 Series <= 12.4.3-03526 / 12.5.x <= 12.5.0-02952 Multiple Vulnerabilities (SNWLID-2026-0017)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote,...

Oracle Linux 8 : ruby:2.5 (ELSA-2026-73519)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73519 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 - Fix REXML ReDoS vulnerability. CVE-2024-49761...

PT-2026-108985

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.11.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc1 and earlier Description The Argo CD repo-server is subject to command injection when cloning, testing, ...

Splunk Enterprise 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.2.x prior to 10.2.7 or 10.4.x prior to 10.4.3. Splunk Enterprise 9.4.x and 10.0.x are not affected. It is, therefore, affected by a missing authentication vulnerability as referenced in the SVD-2026-1001 advisory. An...

Cisco Application Policy Infrastructure Controller API Command Injection (cisco-sa-apic-cmdinj-L6VR4E7)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A command injection vulnerability exists in the web-based management API due to insufficient input validation of user-controlled command arguments. An authenticated,...

ImageMagick 6.9.2-10 Command Injection

ImageMagick version 6.9.2-10 contains command injection through unescaped URLs passed to delegates. The included proof of concept provides a PHP image-upload interface that invokes ImageMagick on supplied files. https://packetstorm.news/download/235008...

PostgreSQL 10.7 COPY from Program Command Execution

PostgreSQL version 10.7 with default superuser credentials demonstrates COPY FROM PROGRAM execution of an operating-system command as the database server user. https://packetstorm.news/download/234985...

Spring Security OAuth 2.0.8 Remote Command Execution

Spring Security OAuth version 2.0.8 allows authenticated remote command execution when its whitelabel error view evaluates a malicious responsetype parameter as a Spring Expression Language expression. Included proof of concept generates the expression. https://packetstorm.news/download/234976...

RHEL 8 : libxml2 (RHSA-2026:79119)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79119 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2026_77359)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677359 advisory. vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 Tenable has extracted the preceding description block directly from...

CVE-2026-108159: Improper Neutralization of Input During Web Page Generation

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

Supervisord 3.3.2 XML-RPC Remote Command Execution

Supervisord version 3.3.2 contains an XML-RPC method-resolution flaw that allows remote command execution through crafted requests. The included proof of concept executes a supplied command and retrieves its output from the Supervisord log. https://packetstorm.news/download/234970...