CVE-2026-111422

The apache-airflow-providers-ssh component (versions before 7.0.1 ) contains a vulnerability in the SSHRemoteJobOperator where the environment parameter is insufficiently quoted. Because values are placed inside an already-quoted wrapper script but only quoted once, shell syntax like $(...) can b...

CVE-2026-116506

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116576

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString in lib/util.js. On Windows, the sanitizer removes ASCII...

CVE-2026-116504

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

UBUNTU-CVE-2026-116576

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString in lib/util.js. On Windows, the sanitizer removes ASCII...

CVE-2026-116576

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString in lib/util.js. On Windows, the sanitizer removes ASCII...

CVE-2025-13833

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...

CVE-2026-116506

A command injection vulnerability exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) within the apmib_set function of the firewall.so file. This flaw allows an attacker to initiate a remote attack to execute arbitrary commands. The exploit has been publicly disclosed and may be utiliz...

CVE-2026-116506 TOTOLINK A950RG firewall.so apmib_set command injection

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

EUVD-2026-110464

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116506 TOTOLINK A950RG firewall.so apmib_set command injection

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

EUVD-2026-110448

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-116505

A command injection vulnerability exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104 ). The flaw is located in the getDeviceInfo function of the device-information Handler component, specifically affecting the file /var/lib/misc/udhcpd.leases . By manipulating the MAC address argument,...

EUVD-2025-211200

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...

CVE-2026-116504

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a command injection flaw in the Cloud Upgrade component. Specifically, the setCloudUpgradeFW function within the file lib/cste_modules/upgrade.so fails to properly neutralize the FileName argument. This oversight allo...

EUVD-2026-110321

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

CVE-2026-116504 TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...