CVE-2026-114354 DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

Missing authorization in the native binder service 'android.dji.server' transaction code 1018 in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to execute arbitrary OS commands as root, because the handler passes a caller-supplie...

CVE-2026-114354 DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

Missing authorization in the native binder service 'android.dji.server' transaction code 1018 in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to execute arbitrary OS commands as root, because the handler passes a caller-supplie...

CVE-2026-114354

The DJI CrystalSky ZS600C firmware (v0.3.9.7 through v0.6.6.9) on Android is vulnerable to a command injection vulnerability due to missing authorization in the native binder service 'android.dji.server' (transaction code 1018). A local application with no permissions can execute arbitrary OS com...

CVE-2026-114353 DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution

Hidden functionality undocumented backdoor in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sending the hard-coded magic string...

CVE-2026-114353

The DJI CrystalSky ZS600C (firmware v0.3.9.7 through v0.6.6.9 ) on Android contains a hidden backdoor within the root-privileged 'assistant' daemon . A physically-present attacker with USB access can execute arbitrary OS commands as root by sending the hard-coded magic string dji26656677 to the U...

CVE-2026-114353 DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution

Hidden functionality undocumented backdoor in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sending the hard-coded magic string...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-tools Read-only triage tools for the October 2026 P...

CVE-2026-98914

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

AZL-110588 CVE-2026-98914 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

CVE-2026-115726

Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...

UBUNTU-CVE-2026-98914

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

CVE-2026-98914

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

CVE-2026-57117 PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw...

CVE-2026-57117

The PraisonAI multi-agent system (package praisonai) contains a shell command injection vulnerability in the LocalManagedAgent and SandboxedAgent compute bridging. Specifically, the component src/praisonai/praisonai/integrations/managed_local.py incorrectly converts read_file, list_files, and wri...

CVE-2026-57117 PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw...

CVE-2026-57117 PraisonAI: Compute-bridged file tools allow shell command injection

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

EUVD-2026-108870

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...

CVE-2026-98914

The Linux kernel contains a vulnerability in the drm/amdgpu driver related to ATOM command table nesting depth . The issue is addressed by capping nesting at 32 levels using execute_depth and returning -ELOOP when this limit is exceeded. While the specific impact is not explicitly detailed, the f...

CVE-2026-98914 drm/amdgpu: cap ATOM command table nesting depth

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...