CVE-2026-108387

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo-bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radar...

Linux Distros Unpatched Vulnerability : CVE-2026-108387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker- controlled data from several binary format plugins coul...

CVE-2026-108387

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo-bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radar...

CVE-2026-108387 radare2: Remote code execution when loading Pebble/SMD binary

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo-bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radar...

CVE-2026-108387

The radare2 reverse engineering framework (prior to version 6.2.2 ) is vulnerable to Remote Code Execution (RCE) . The flaw exists because attacker-controlled data from specific binary format plugins can reach RBinInfo->bclass. By opening or analyzing a crafted Pebble or Sega Mega Drive binary...

CVE-2026-108387 radare2: Remote code execution when loading Pebble/SMD binary

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo-bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radar...

CVE-2026-108387 radare2: Remote code execution when loading Pebble/SMD binary

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo-bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radar...

PT-2026-137226

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.2 Description An issue exists where attacker-controlled data from binary format plugins can reach RBinInfo-bclass. When opening or analyzing a specially crafted Pebble or Sega Mega Drive binary, a dbg:// URI can b...

CVE-2026-108929

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

EUVD-2026-97909

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

CVE-2026-108929

A flaw in Netcore NR268 1.7.121109 affects the DDNS component, specifically within the execvp function of the /router/DDNSset.cgi file. An attacker can perform a remote argument injection by manipulating the Hostname argument. While the technical details confirm the vulnerability type and locatio...

CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

PT-2026-110922

Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109 Description An argument injection flaw exists in the DDNS component. A remote attacker can exploit this by manipulating the Hostname argument passed to the execvp function within the '/router/DDNSset.cgi'...

EulerOS 2.0 SP13 : bison (EulerOS-SA-2026-4123)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

EulerOS 2.0 SP13 : bison (EulerOS-SA-2026-4032)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4305)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

CVE-2026-108929: Improper Neutralization of Argument Delimiters in a Command

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4214)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

EUVD-2026-70813

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

CVE-2026-85427

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...