RockyLinux 8 : lrzsz (RLSA-2026:83525)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83525 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

MiracleLinux 8 : environment-modules-4.5.2-5.el8_10 (AXSA:2026-2078:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2078:01 advisory. environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters CVE-2026-85013 Tenab...

CVE-2026-96620: Improper Input Validation

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

CVE-2026-94169: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1...

PT-2026-116154

Name of the Vulnerable Software and Affected Versions Claude Agent SDK versions prior to 0.2.121 Description An issue exists where the resume option is passed to the Claude CLI as a separate token without validation. This allows a value starting with a dash to be parsed as an independent CLI flag...

VulnCheck KEV: CVE-2026-94169

Improper Control of Generation of Code 'Code Injection' vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1...

Nextcloud Collabora Online Built-in CODE Server 26.4.302 Command Injection Exposure Checker

The Collabora Online Built-in CODE Server richdocumentscode app for Nextcloud before version 26.4.303 contains an unauthenticated OS command injection vulnerability in proxy.php. This tool passively checks a supplied Nextcloud instance for public exposure indicators...

CVE-2026-108743: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache...

cifs-utils 7.6 Credentials File Option Injection

cifs-utils versions 7.0 through 7.6 contain a credentials-file option injection vulnerability that allows an unprivileged local user who controls a credentials file used by a privileged mount to inject mount options and execute files with root privileges. https://packetstorm.news/download/236052...

PT-2026-116144

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents manually wraps a monitor Name value in single quotes instead of using escapeshellarg before placing it in shell commands when a user with monitor-create or monitor-edit permission...

PT-2026-115414

Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete...

PT-2026-115657

destructive command guard dcg is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected...

Rocky Linux 8 [CIQ] Security Update: environment-modules / environment-modules-debuginfo / etc (crlsa-2026_82919)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682919 advisory. environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters CVE-2026-85013 Tenable has...

CVE-2026-92115: Improper Neutralization of Special Elements used in a Command

The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppaimagemagicka function, where the...

CVE-2026-81452: Least Privilege Violation

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service...

PT-2026-123457

A flaw was found in libblockdev. The bd fs ntfs set label and bd fs vfat set label functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a...

Ollama 0.31.1 Bash Approval Bypass

Ollama version 0.31.1 experimental Agent Mode contains an incorrect authorization flaw that permits appended shell commands to reuse an approved command prefix. The proof of concept exercises the vulnerable approval logic without executing commands. https://packetstorm.news/download/236043...

PT-2026-115844

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are...

PT-2026-115873

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing...

PT-2026-116123

Name of the Vulnerable Software and Affected Versions Dell Alienware Command Center AWCC versions prior to 6.14.54.0 Description A Least Privilege Violation exists where a low privileged attacker with local access could potentially exploit the issue to achieve Elevation of Privilege and cause a...