Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2026/03/25 12:26 a.m.6 views

SUSE CVE-2026-28279

osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the osctrl-admin environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These...

8.4CVSS6.7AI score0.009EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/02/28 2:5 a.m.11 views

osctrl is Vulnerable to OS Command Injection via Environment Configuration

Summary An OS command injection vulnerability exists in the osctrl-admin environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These commands are embedded into enrollment one-liner scripts...

8.4CVSS6.7AI score0.009EPSS
Exploits0References5Affected Software1
Snyk
Snyk
added 2026/02/27 3:21 a.m.4 views

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the osctrl-admin environment configuration. An attacker can execute arbitrary shell commands on every endpoint that enrolls using a compromised environment by injecting commands into the hostname parameter, which ar...

8.4CVSS6.2AI score0.009EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/27 3:21 a.m.3 views

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the osctrl-admin environment configuration. An attacker can execute arbitrary shell commands on every endpoint that enrolls using a compromised environment by injecting commands into the hostname parameter, which ar...

8.4CVSS6.2AI score0.009EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/26 10:59 p.m.2 views

CVE-2026-28279 `osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration

osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the osctrl-admin environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These...

7.3CVSS6.7AI score0.009EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/26 10:59 p.m.4 views

CVE-2026-28279

osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the osctrl-admin environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when creating or editing environments. These...

8.4CVSS8AI score0.009EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder