WS-2026-0171

OpenCode 1.0.137 through 1.18.32 and 2.0.0 through 2.0.17 pass the OAuth authorization URL returned by a remote MCP server to the 'open' package 10.1.2 without validation. On Windows and WSL, 'open' 10.1.2 embeds the URL unescaped in a PowerShell command, so a malicious or compromised MCP server...

CVE-2026-112263: Improper Neutralization of Special Elements used in an OS Command

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in formatcommand. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

CVE-2026-112159: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

RHEL 9 : environment-modules (RHSA-2026:84594)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84594 advisory. The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information need...

TencentOS Server 4: emacs (TSSA-2026:1176)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1176 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ALSA-2026:84591 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

PT-2026-118023

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd...

CVE-2026-107188: Unrestricted Upload of File with Dangerous Type

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-108983: Improper Neutralization of Special Elements used in an OS Command

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...

CVE-2026-109432: Improper Neutralization of Special Elements used in an Expression Language Statement

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the...

ALSA-2026:84594 Moderate: environment-modules security update

The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "modul...

PT-2026-117477

Name of the Vulnerable Software and Affected Versions PingTools Network Utilities version 4.64 Description The application contains an OS command injection flaw within the Watcher ICMP service. A local attacker capable of creating or modifying a Watcher service can provide an arbitrary value in t...

PT-2026-117448

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the...

PT-2026-117643

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

PT-2026-117206

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. The manipulation of the argument dm command...

PT-2026-117249

Name of the Vulnerable Software and Affected Versions HPE Compute Scale-up Server 3200 affected versions not specified HPE Compute Scale-up Server 3250 affected versions not specified HPE Superdome Flex affected versions not specified HPE Superdome Flex 280 affected versions not specified...

PT-2026-117407

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

Roundcube -- Multiple vulnerabilities

The Roundcube Mail project reports: IMAP command injection via CRLF in uid parameter of mail/headers and mail/viewsource action bug where an alias login wasn’t qualified by IMAP host Add a size limit to the CSS proxy content processing SSRF filter islocalurl bypass via NAT64 64:ff9b::/96 remote...

Oracle Linux 9 : environment-modules (ELSA-2026-84594)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-84594 advisory. 5.3.0-2.1 - fix command injection in bash Tab completion CVE-2026-85013 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2026-112301: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...