Dell PowerProtect Data Domain Virtual Edition path traversal vulnerability

Versions 7.7.1.0 through 8.7, LTS2024 versions 7.13.1.0 through 7.13.1.70, LTS2025 versions 8.3.1.0 through 8.3.1.30, and LTS2026 versions 8.6.1.0 through 8.6.1.10 contain a path traversal vulnerability. This vulnerability stems from improper path handling and may allow attackers with remote acce...

PT-2026-126665

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The...

TP-Link RE305 command injection vulnerability

The TP-Link RE305 V3 running firmware versions prior to 1.1.8 Build 20260921 Rel. 42853 contain a command injection vulnerability. This flaw arises because the TDDP v2 service utilizes a fixed and predictable encryption key. As a result, unauthenticated attackers within the same local network can...

PT-2026-125892

Name of the Vulnerable Software and Affected Versions Supermicro BMC affected versions not specified Description The Baseboard Management Controller BMC fails to correctly enforce encryption and integrity requirements for IPMI commands. This allows an attacker to send crafted packets to execute...

Sunhillo SureLine command injection vulnerability

Versions prior to Sunhillo SureLine 9.1.5 contain a command injection vulnerability. This vulnerability stems from OS command injection in the networkDiag.cgi endpoint. Authenticated remote attackers can inject shell metacharacters into the ipAddr or dnsAddr parameters, thereby bypassing characte...

PT-2026-127216

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ipAddr or dnsAddr parameters. Attackers...

CVE-2026-112351: Improper Neutralization of Special Elements used in an OS Command

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ipAddr or dnsAddr parameters. Attackers...

PT-2026-127149

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

Hitachi Energy CoreTec Product

SUMMARY Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer...

Autodesk Fusion Post Processor Utility Extension command injection vulnerability

Autodesk Fusion Post Processor Utility Extension versions 5.0.1 through 5.0.2 contain a command injection vulnerability. This vulnerability arises when a maliciously crafted .stack.json file triggers trusted Markdown injection, potentially allowing arbitrary commands to be executed within the...

PT-2026-127303

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the Command component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

Moxa OnCell G3150A-LTE Series command injection vulnerability

The Moxa OnCell G3150A-LTE Series version 1.0.0 contains a command injection vulnerability. This vulnerability stems from insufficient input validation in the SMS management functionality, potentially allowing remote attackers with appropriate privileges to execute arbitrary commands...

SuperMicro MBD-X12SPI trust management issue vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains a trust management vulnerability. This flaw stems from BMC’s failure to properly enforce integrity and encryption requirements for IPMI commands, potentially allowing attackers to execute arbitrary commands within active sessions via specially...

PT-2026-125887

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands o...

PT-2026-125888

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

PT-2026-126390

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time synchronization handler, which is responsible for setting th...

CVE-2026-111422 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated "environment" parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as "$..." in a value was executed on the remote SSH host. In a Dag that...

CVE-2026-111422 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...