CVE-2026-97160: Improper Control of Generation of Code

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

PT-2026-99395

Name of the Vulnerable Software and Affected Versions UP plugin versions 5.0.0 through 5.2.0 UP plugin versions 6.0.0 through 6.0.29 UP plugin versions prior to 6.1.0 Description An authenticated, privileged PHP command injection exists in the UP plugin extension. Additionally, an unauthenticated...

PT-2026-99391

Name of the Vulnerable Software and Affected Versions Froxlor versions 2.0.0 through 2.3.10 Description Stored cross-site scripting occurs when a user with customer privileges uploads an SSL certificate. The Certificates API add and update methods use openssl x509 parse to process the certificate...

CVE-2026-100561: Improper Neutralization of Argument Delimiters in a Command

OpenClaw npm package 'openclaw' versions = 2026.3.22 and 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign...

CVE-2026-100552: Incorrect Authorization

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

PT-2026-99385

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.12 Description Insufficient restriction and escaping of the system.letsencryptchallengepath setting allows for command injection. The value of this setting is concatenated unescaped into the acme.sh command line...

openSUSE 16 Security Update : haveged (openSUSE-SU-2026:21958-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21958-1 advisory. Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket bsc1264086. Tenable has extracted the preceding...

PT-2026-99189

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.8.1 Description The software fails to correctly enforce per-chat tool policies for Codex app-server runtime tools. Specifically, a conversation-level tools.allow rule filters OpenClaw tools but fails to restrict...

PT-2026-99316

Name of the Vulnerable Software and Affected Versions SiYuan versions 3.7.0 through 3.8.3 Description A stored cross-site scripting issue exists in the gallery and kanban database renderers because field descriptions are not escaped in aria-label attributes. In the Electron desktop application wh...

PT-2026-99314

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description Authenticated attackers can inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates because four stored Attribute View values i...

CVE-2026-100643: Improper Neutralization of Input During Web Page Generation

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

PT-2026-99167

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description Reusable execution approvals fail to bind the working directory context, which allows approved commands to be executed in directories other than the one originally intended. An attacker possessin...

PT-2026-99198

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.22 through 2026.8.0 Description An approval-bypass flaw exists in the exec approval policy. The policy may trust a command-running wrapper without inspecting the command contained within its arguments. If an operator...

CVE-2026-100559: Improper Neutralization of Special Elements used in an OS Command

OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected...

CVE-2026-100570: Improper Neutralization of Argument Delimiters in a Command

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100599: Improper Neutralization of Special Elements used in an OS Command

OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Google Meet node commands. The googlemeet.chrome command accepts caller-supplied audio command arrays and executes them on a paired node without going through the normal system.run approval flow. In...

CVE-2026-94131: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...

PT-2026-99181

Name of the Vulnerable Software and Affected Versions @openclaw/voice-call versions prior to 2026.8.1 Description The package launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. This causes owner-only tool filtering to fail...

PT-2026-99196

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description A command parser issue exists where escaped newlines interfere with the parsing of the exec allowlist. This allows attackers to craft input containing escaped newlines to bypass allowlist...

CVE-2026-100544: Missing Authorization

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...