PT-2026-93881

Name of the Vulnerable Software and Affected Versions Nuclei versions prior to 3.11.1 Description The software caches template signature verification based solely on file modification time, omitting content checksums. This allows an attacker to replace verified templates with unsigned malicious...

Red-Teaming Auto Mode: Improving Blocking Classifiers against Malign Coding Agents

To keep coding agents from going off the rails, production systems now review each proposed action with a blocking monitor that can reject it before it runs Auto Mode in Claude Code, Guardian in OpenAI's Codex. Prior evaluations of such monitors largely measure robustness to accidental harm or...

PT-2026-93990

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software affected versions not specified Description An authenticated remote attacker can execute arbitrary commands with root privileges due to unsecured deserialization of user-controlled data within the web-management...

PT-2026-93963

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center FMC Software affected versions not specified Description A flaw in the External Database Access feature allows an unauthenticated remote attacker to execute arbitrary commands with root privileges. The...

PT-2026-94075

Name of the Vulnerable Software and Affected Versions cc-connect versions prior to 1.5.1 Description The software fails to enforce per-user allowlist filtering within the onCardAction handler used for Feishu interactive card callbacks. This flaw allows attackers to dispatch agent commands by...

PT-2026-93959

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An issue exists that allows an authenticated remote attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying operating system. This is caused...

CVE-2026-92801: Incorrect Authorization

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by triggering card actions in admitted chats, bypassing the per-user access controls that protect the text message handle...

CVE-2026-92762: Missing Authorization

Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated callbacks and modify startup commands,...

CVE-2026-73166: Improper Control of Generation of Code

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73165: Improper Neutralization of Special Elements used in an OS Command

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-58146: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

PT-2026-93956

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description Insufficient validation of user-supplied input allows an authenticated remote attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying...

PT-2026-93868

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software affected versions not specified Description An issue exists in the internal configuration of the Apache JServ Protocol AJP connector. This is caused by the incorrect initialization of encryption parameters for the AJP...

PT-2026-93498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla nvme ls reject iocb function fails to acquire the necessary lock when allocating from and advancing the request ring. This occurs...

CVE-2026-76698 Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

MAL-2026-16221 Malicious code in bender-rspack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6997cea54ae81d1addcb41ddac29e94923dfa1042265253c555cb4945ad5b4 package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL, embedding $whoami, $pwd, and $hostname as...

EUVD-2026-78884

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...

EUVD-2026-78334

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...

CVE-2026-80217

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...

EUVD-2026-78332

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...