CVE-2026-79965

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

CVE-2026-79965

Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) is affected by an External Control of Critical State Data vulnerability. An unauthenticated attacker with network access could exploit it to achieve unauthorized access , resulting in a low confidentiality impact (CVSS 3.1:...

EUVD-2026-74896

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

CVE-2026-79692

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...

EUVD-2026-74851

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...

CVE-2026-66302

CVE-2026-66302 is a CRITICAL vulnerability (CVSS 9.8) in Skype for Business Server caused by external control of file name or path , allowing an unauthorized attacker to achieve remote code execution over the network with no privileges or user interaction. Affected products include Skype for Busi...

CVE-2026-62804

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2026-73923

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

MAL-2026-15893 Malicious code in sliding-score-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e2a97d5dd3e10080ee69201bf757ea14ebda90b9da1be41392584152ad1f1d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-66324

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

MAL-2026-14605 Malicious code in 3layerdipstack1lkqg9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3055362817a22386f2c0e5db959db42444b9c60d620c9c8453ee196a1d0e8fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1ykdgn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabe62f28af88a694847d251ec0545bcdfe498e5bf37df3e5d32552bfd10aae3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14624 Malicious code in 3layerdipstack4iivta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d3d58aee204e2100f687789f6a289319f32965af1e8dd324767d40be1b36d0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackjnh4m1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbafb2120a0c1a9e305f4904a3c753b097417bf2d6ac4348ca6ff493649b0d55 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

MAL-2026-14577 Malicious code in hydration-ui-dlx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76afa004355ba53a89056c6daff511bb4f41e2bd666e2a5592d033e079e5740 The package's main module contains a top-level IIFE that chmods 0o755 and detached-spawns dist/internal/math-calc.mjs, which is a Linux x8664 ELF...

Astra Linux – Vulnerability in beep

Beep version 1.3 and later contains a vulnerability in the External Control of File Name or Path feature within the --device option. This vulnerability allows local unprivileged users to inhibit the execution of arbitrary programs by other users, potentially leading to Denial-of-Service attacks...

CVE-2026-76158 Datiphy Data Management Center - External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

CVE-2026-76158

Datiphy Data Management Center (v8.3.0 through v8.5.1) contains a path traversal vulnerability in its upload API endpoint. An unauthenticated remote attacker can supply relative or absolute path sequences to write files to arbitrary locations outside the intended upload directory, enabling arbitr...

CVE-2025-36398

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename...