CVE-2026-29058

AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, data exfiltration e.g., configuration...

Important Photon OS Security Update - PHSA-2026-4.0-0974

Updates of 'libssh', 'linux' packages of Photon OS have been released...

XikeStor SKS8310-8X 操作系统命令注入漏洞

The XikeStor SKS8310-8X is an Ethernet switch produced by the XikeStor company. Versions of XikeStor SKS8310-8X prior to 1.04.B07 contain a vulnerability related to operating system command injection. This vulnerability stems from the PingTestSet endpoint in the/goform/ directory, which allows fo...

CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, data exfiltration e.g., configuration...

CVE-2026-28727

Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124...

The vulnerability of the usb_read8() function in the drivers/staging/rtl8712/usb_ops.c module allows a hacker to cause a service failure within the Linux operating system.

The vulnerability of the usbread8 function in the drivers/staging/rtl8712/usbops.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ice_xsk_pool_setup() in the driver drivers/net/ethernet/intel/ice/ice_xsk.c of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function icexskpoolsetup in the driver module drivers/net/ethernet/intel/ice/icexsk.c of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ext4_ext_migrate() function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the __is_bitmap_valid() function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system allows a malicious actor to trigger a service failure.

The vulnerability of the isbitmapvalid function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the iavf_reset_task() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfresettask function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to...

Vulnerability of the r8712_free_drv_sw() function in the drivers/staging/rtl8712/os_intfs.c module – supports additional devices in the Linux operating system, allowing an attacker to cause a service failure.

Vulnerability of the r8712freedrvsw function in the drivers/staging/rtl8712/osintfs.c module – Support for additional device drivers in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2026-28727

CVE-2026-28727 : Local privilege escalation caused by insecure Unix socket permissions. Affected on macOS: Acronis Cyber Protect 17 before build 41186 and Acronis Cyber Protect Cloud Agent before build 41124. The CVSS vector indicates LOCAL access, low privileges required, no user interaction, wi...

mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...

CVE-2026-20016

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attack...

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

CVE-2026-24457

An unsafe parsing of OpenMQ's configuration in OpenMQ versions 6.5.2 and 6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ...

EUVD-2026-9834

Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Client login, peer authentication modules allows Reusing Session IDs aka Session Replay. Thi...

CVE-2026-24457

An unsafe parsing of OpenMQ's configuration in OpenMQ versions 6.5.2 and 6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ...