Linux Distros Unpatched Vulnerability : CVE-2026-118692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::linkclicked that allows attackers to execute commands by embedding shell...

PT-2026-132090

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $... subexpressions in URLs, such as OAuth authorization endpoint values from malicious MCP servers, which...

CVE-2026-119025: sindresorhus, modelcontextprotocol, anomalyco: open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell…

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $... subexpressions in URLs, such as OAuth authorizationendpoint values from malicious MCP servers, which...

Sindre Sorhus command injection vulnerability

Versions 7.2.0 through 11.0.0 of Sindre Sorhus contain a command injection vulnerability. This vulnerability stems from OS command injection; when index.js passes unescaped $... expressions within URLs—such as values provided by malicious MCP servers for OAuth authorization endpoints—to powershel...

PT-2026-132405

Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp check command requested an OCSP response from a certificate's Authority Information Access URL without verifying the response signature or authorizing the signer. A malicious responder or on-path attacker could return ...

Fedora 45 : accessibility-inspector / akonadi-calendar / akonadi-calendar-tools / etc (2026-21f4914bca)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-21f4914bca advisory. KDE Plasma 6.8.1 + Gear 28.08.2 And related rebuilds ---- - CVE-2026-110236 Arbitrary command execution via crafted folder name Tenable has extracted the...

FreeBSD : p5-GD -- OS command injection (2b47c440-d2c0-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2b47c440-d2c0-11f1-97dc-40b034429ecf advisory. GD project reports: Fix CVE-2026-11526, command injection via 2-arg open in makefilehandle. CWE-78,...

PT-2026-132073

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

CVE-2026-107044

Insecure permissions within ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allow unauthorized attackers to arbitrarily manipulate the application's MAXS command/transport mechanism . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource). While the ri...

PT-2026-132336

Name of the Vulnerable Software and Affected Versions Progress Software WS FTP Server versions prior to 2024.0.7 Progress Software WS FTP Server versions prior to 2025.0.4 Description An OS command injection issue exists in the Windows version of the software. This flaw allows for arbitrary comma...

PT-2026-132333

An OS command injection vulnerability in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...

PT-2026-132214

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

PT-2026-132224

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

PT-2026-132343

Insecure permissions in ProjectMAXS MAXS Main v0.5.19 versionCode 19 allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism...

CVE-2026-107326: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-104308: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an OS command...

Progress Software WS_FTP Server command injection vulnerability

Versions prior to Progress Software WSFTP Server 2024.0.7 and 2025.0.4 contain a command injection vulnerability. This vulnerability stems from OS command injection and may allow arbitrary commands to be executed under certain configurations...

PT-2026-132064

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.3 Description An issue exists where an accepted SIP MESSAGE a text note sent through the phone system can be used to execute FreeSWITCH API commands, including operating system commands. This occurs because...

PT-2026-130631

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.31.2 through 0.40.5 Description The nvm ls function uses a sed program to filter installed versions by embedding the requested version pattern in a ... address. Because backslashes are not escaped, a version...