CVE-2026-20009: Improper Neutralization of Special Elements

A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to log in to a Cisco Secure Firewall ASA device and execute commands as a specific...

Tenda W20E Router Arbitrary Command Execution

The vulnerability of the addAuthUser function goform/formAddWebAuthUse in the Tenda W20E router microprogramming system lies in the fact that the operation’s output escapes the buffer and is stored in the userInfo parameter’s memory. Exploiting this vulnerability allows a remote attacker to execu...

D-link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/setacstatus function in D-link DIR-823X router microprogramming software is related to the failure to eliminate special elements during the processing of parameters acipaddr/acipstatus/aprandtime. Exploiting this vulnerability allows a remote attacker to execute...

SEPPmail Secure Email Gateway security vulnerability

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities, which were due to insufficient PDF encryption and password encoding. These vulnerabilities cou...

PT-2026-22876

Name of the Vulnerable Software and Affected Versions International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 Description An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility. An authenticated...

Cisco Secure Firewall Adaptive Security Appliance security vulnerabilities

The Cisco Secure Firewall Adaptive Security Appliance is an enterprise-level firewall software developed by Cisco, a US company. There is a security vulnerability in the Cisco Secure Firewall Adaptive Security Appliance software. This vulnerability stems from insufficient input validation during...

PT-2026-22887

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1 Description The SEPPmail Secure Email Gateway does not properly handle PDF encryption passwords, potentially allowing for operating system command execution. The issue arises from...

D-link DIR-823X Configuration Handler Sub_4208A0 Arbitrary Command Execution

The vulnerability of the sub4208A0 /goform/setdmz function in the Configuration Handler component of the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the dmzhost/dmzenable parameter. Exploiting th...

D-link DIR-823X Sub Process Arbitrary Command Execution

The vulnerability of the sub420688 /goform/setqos function in D-link DIR-823X router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially craft...

UTT 521G Router Sub_446B18 Arbitrary Command Execution

The vulnerability of the sub446B18 function in the /goform/formPdbUpConfig file of the UTT 521G router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the policyNames parameter...

PT-2026-23022

A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device. This...

D-Link DIR-600 B5 Router ssdp.cgi Command Execution

The vulnerability of the ssdp.cgi file of the D-Link DIR-600 B5 router’s microprogramming system is related to insufficient checking of arguments passed in the command when processing the parameters HTTPST/REMOTEADDR/REMOTEPORT/SERVERID. Exploiting this vulnerability allows a remote attacker to...

D-link DIR-823X Sub Process Command Execution

The vulnerability of the sub420618 function in the /goform/setupnp function of the D-link DIR-823X microprogramming router software is related to the failure to take measures to neutralize special elements during the processing of the upnpenable parameter. Exploiting this vulnerability allows a...

Tenda AC15 Sub B0488 Function Arbitrary Command Execution

The vulnerability of the subB0488 function goform/formSetIptv in the microprogramming software for Tenda AC15 is related to incorrect handling of code generation in memory when processing the parameter s11. Exploiting this vulnerability can allow an attacker to execute arbitrary commands remotely...

Tenda W20E doSystemCmd Command Execution

The vulnerability of the doSystemCmd goform/formSetUSBPartitionUmount function in the Tenda W20E router microprogramming system is related to incorrect handling of code generation in memory when processing the usbPartitionName parameter. Exploiting this vulnerability allows an attacker to execute...

Tenda W20E Arbitrary Command Execution

The vulnerability of the pPortMapIndex function implemented in goform/formDelPortMapping of the Tenda W20E router software is related to the execution of operations outside the buffer in the parameter strcpy area of memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...

Tenda W20E Router Arbitrary Command Execution

The vulnerability of the addWewifiWhiteUser function in the goform/formAddWewifiWhiteUser function of the Tenda W20E router’s microprogramming software is related to the execution of operations outside the buffer in the userInfo parameter’s memory. Exploiting this vulnerability could allow a remo...

CVE-2026-1775

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device...

OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux)

Summary A command injection vulnerability exists in OpenClaw’s Linux systemd unit generation path. When rendering Environment= entries, attacker-controlled values are not rejected for CR/LF, and systemdEscapeArg uses an incorrect whitespace-matching regex. This allows newline injection to break o...

GHSA-VFFC-F7R7-RX2W OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux)

Summary A command injection vulnerability exists in OpenClaw’s Linux systemd unit generation path. When rendering Environment= entries, attacker-controlled values are not rejected for CR/LF, and systemdEscapeArg uses an incorrect whitespace-matching regex. This allows newline injection to break o...