CVE-2026-84832

SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged API token can execute arbitrary commands with "nobody" privileges...

WatchGuard XCS 'id' OS Injection Vulnerability

WatchGuard XCS is an antivirus and email management security appliance. The WatchGuard XCS WEB interface 'mailqueue.spl' fails to properly handle the 'id' parameter, allowing remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary system commands with...

XFree86 X11R6 3.3.x Font Server Remote Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execute commands on the targ...