The vulnerability of the process_files_from_worker() function in the framework/wazuh/core/cluster/master.py file of the security monitoring and threat detection platform for Wazuh allows a perpetrator to execute arbitrary code.

The vulnerability of the processfilesfromworker function in the framework/wazuh/core/cluster/master.py file of the security monitoring and threat detection platform Wazuh is related to improper external manipulation of file names or paths. Exploiting this vulnerability could allow a remote attack...

ROS-20260824-73-0032

The vulnerability in ffmpeg is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-80963

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-80961

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

PT-2026-80939

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

PT-2026-80960

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

PT-2026-80955

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-80979

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

PT-2026-80957

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth set function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

PT-2026-80972

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch lan gvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of servi...

PT-2026-80973

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl general setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,...

PT-2026-80975

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag logmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

PT-2026-80951

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5 . The flaw resides in the external PDF viewer used to display the application manual. An authenticated low-privileged user can escape the kiosk environmen...

PT-2026-81078

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability...

PT-2026-80870

RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

CVE-2026-75464

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

PT-2026-80999

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any user account, including the system administrator, without verifying password-change permissions. Attackers can supply...

PT-2026-81009

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...