EUVD-2026-123896

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized code or commands via http requests...

CVE-2026-126252

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized code or commands via http requests...

CVE-2026-126252

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized code or commands via http requests...

CVE-2026-126252

Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 are affected by an SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements. This flaw may allow an authenticated attacker to execute unauthorized code or commands via HTTP requests...

CVE-2026-126221

A vulnerability exists in FortiAnalyzer (versions 8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11 and Cloud equivalents) and FortiManager (versions 8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11 and Cloud equivalents) due to CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component) and CWE...

CVE-2026-126183

A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Clo...

CVE-2026-126183

A high-severity authorization bypass vulnerability (CWE-639 ) exists in the GUI of Fortinet FortiManager , FortiManager Cloud , and FortiSase-Sovereign . The flaw allows an authenticated attacker to execute commands outside of the expected scope by sending a specially crafted HTTP request . Affec...

CVE-2026-126145

Fortinet FortiMail is affected by an OS command injection vulnerability [CWE-78]. This flaw allows an authenticated administrator with system-time read-write access to execute unauthorized code or commands with root privileges. The vulnerability impacts the following versions: FortiMail 8.0.0 thr...

CVE-2026-126252: Fortinet FortiAuthenticator: A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized code or commands via http requests...

Authorization bypass through user-controlled key in GUI

An Authorization Bypass Through User-Controlled Key vulnerability cwe-639 in FortiManager, FortiManager Cloud and FortiSase-Sovereign GUI may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Exploit for Authentication Bypass by Spoofing in Beyondtrust Remote_Support

CVE-2026-102764 — BeyondTrust Remote Support Exploit Authen...

EUVD-2026-102335

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the loginbanner field. Attackers can submit a single-line banner containing '' to escape the unquoted strongswan.con...

CVE-2026-111223: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the loginbanner field. Attackers can submit a single-line banner containing '' to escape the unquoted strongswan.con...

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions V8.0 Update 11, SIMATIC WinCC V8.1 All versions V8.1 Update 7. The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an...

CVE-2026-109289

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

Nexting pinclaw authorization issue vulnerability

In versions of Nexting Pinclaw 0.3.0 and earlier, there is an authorization issue vulnerability. This vulnerability stems from the src/core/http-router.ts file, which skips the authToken check for the POST /pinclaw/send request. Unauthorized attackers can inject a blind prompt into the user’s mai...

CVE-2026-107779

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...

MAL-2026-17339 Malicious code in reactjs-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e58c82916c5199ef9e73a5d70f91d120312151eb5c28090d8bbf6dbf4117543 The package's preinstall lifecycle script collects host identity metadata from the installer machine — os.hostname, the output of...

CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...