EUVD-2026-72463

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-78488

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain an OS Command Injection vulnerability caused by improper neutralization of special elements in OS commands. A low-privileged remote attacker could exploit this to achieve command ex...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

EUVD-2026-72458

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

CVE-2026-19843 is a command injection flaw in 389-ds-base . The Cockpit 389 Console LDAP editor embeds an LDAP distinguished name (DN) into a shell command without proper escaping. An LDAP user with delegated privileges can craft a malicious DN with shell metacharacters; when a Cockpit administra...

CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

Summary IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs Vulnerability Details CVEID:CVE-2026-17416 DESCRIPTION: IBM App Connect Enterprise could allow a local attacker to execute arbitrary code due to insecure deserialization. CWE:CWE-502:...

CVE-2026-61409

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-61409

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-61409

Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...

EUVD-2026-72361

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-61409

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-86299

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...

CVE-2026-86295

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...

CVE-2026-86299

Linksys RE7000 (version 2.0.15) is affected by an OS command injection in the PingTest Handler component. The vulnerable function is platform_event_pingTest in /cgi-bin/json.cgi?PingTest, where manipulation of the pingTestIp, pingTestPktSize, or pingTestTimes arguments allows an attacker to injec...

CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack ca...