193415 matches found
CVE-2026-98914 drm/amdgpu: cap ATOM command table nesting depth
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded...
CVE-2026-115726 Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...
CVE-2026-115726 Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...
CVE-2026-115726 Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...
CVE-2026-115726
The AI coding tool Aider (versions through 0.86.2) is vulnerable to command execution via the repository-level .aider.conf.yml file. The root cause is the automatic loading of this configuration file without a trust prompt. Attackers who can commit a malicious .aider.conf.yml can set notification...
CVE-2026-115726
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...
EUVD-2026-108714
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=Tr...
Security update for emacs
This update for emacs fixes the following issues: CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection bsc1284345, bsc1284990. Patch Instructions: To install this SUSE...
SUSE-SU-2026:4893-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. - CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection bsc1284345, bsc1284990...
CLSA-2026-1792745277 vim: Fix of 2 CVEs
CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480...
CVE-2026-75775
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router...
CVE-2026-75779
Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...
EUVD-2026-108610
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router...
CVE-2026-75775
Certain ASUS routers are vulnerable to an OS command injection vulnerability (CWE-78) due to improper neutralization of special elements used in an OS command. A remote user can execute arbitrary commands with root privileges by sending crafted parameters to the router, specifically when the devi...
CVE-2026-75775
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router...
CVE-2026-75775
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router...
EUVD-2026-108608
Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...
CVE-2026-75779
Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...
CVE-2026-75779
An OS Command Injection and Cross-Site Request Forgery (CSRF) vulnerability exists in an ASUS router model. An attacker can trick a logged-in administrator into visiting a phishing website, which triggers the router to execute arbitrary commands with root privileges . For further information and ...
CVE-2026-75779
Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...