EUVD-2026-93406

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

CVE-2026-105789 Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

CVE-2026-105789

The Microsoft UFO open-source automation framework is vulnerable to an arbitrary file write in the Linux MCP execute_command tool (specifically within ufo/client/mcp/http_servers/linux_mcp_server.py) prior to version 3.0.9 . The root cause is that while sort and uniq are treated as read-only, an ...

EUVD-2026-93405

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788

The Microsoft UFO open-source framework is vulnerable to authenticated Android shell command injection in versions prior to 3.0.10 . The flaw exists in the type_text and launch_app tools within ufo/client/mcp/http_servers/mobile_mcp_server.py, where the text and package_name parameters are passed...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

Lack of vulnerability awareness in Microsoft Exchange Server

Microsoft has identified a vulnerability in Microsoft Exchange Server that requires an out-of-band fix, ahead of the monthly October update. This vulnerability relates to weak authorization controls within Microsoft Exchange Server. An authorized attacker can escalate privileges remotely through...

CVE-2026-105791: Improper Neutralization of Argument Delimiters in a Command

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the runshell tool in the CommandLineExecutor component of ufo/client/mcp/localservers/climcpserver.py validates only the first token of the bashcommand parameter and permits...

PT-2026-106739

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute command tool in ufo/client/mcp/http servers/linux mcp server.py treats sort and uniq as read-only commands while the free-form command parameter can select their...

PT-2026-107173

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description When configured to use Microsoft Entra ID, SSSD fails to properly sanitize search inputs before incorporating them into directory query filters. A local user can exploit this by submitting a...

CVE-2026-104047: Improper Neutralization of Delimiters

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

PT-2026-106740

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinned addresses only to...

PT-2026-106748

Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.9 Description The run shell tool within the CommandLineExecutor component of ufo/client/mcp/local servers/cli mcp server.py incorrectly validates the bash command parameter by only checking the first token...

CVE-2026-101207: Improper Neutralization of Special Elements used in an OS Command

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

PT-2026-106738

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type text and launch app tools in ufo/client/mcp/http servers/mobile mcp server.py pass the authenticated caller-controlled text and package name parameters into adb shell comma...

CVE-2026-105789: Improper Neutralization of Argument Delimiters in a Command

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

CVE-2026-105790: Server-Side Request Forgery (SSRF)

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinnedaddresses only to...

CVE-2026-105788: Improper Neutralization of Special Elements used in an OS Command

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...