CVE-2026-29058

AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, data exfiltration e.g., configuration...

XikeStor SKS8310-8X 操作系统命令注入漏洞

The XikeStor SKS8310-8X is an Ethernet switch produced by the XikeStor company. Versions of XikeStor SKS8310-8X prior to 1.04.B07 contain a vulnerability related to operating system command injection. This vulnerability stems from the PingTestSet endpoint in the/goform/ directory, which allows fo...

Important Photon OS Security Update - PHSA-2026-4.0-0974

Updates of 'libssh', 'linux' packages of Photon OS have been released...

CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated attacker can execute arbitrary OS commands on the server by injecting shell command substitution into the base64Url GET parameter. This can lead to full server compromise, data exfiltration e.g., configuration...

CVE-2026-28727

Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 macOS before build 41186, Acronis Cyber Protect Cloud Agent macOS before build 41124...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the iavfresettask function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to...

F2FS Heap Buffer Overflow DoS

The vulnerability of the isbitmapvalid function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

NVUE Interface Privilege Escalation

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges...

rtl8712 usb_read8 function DoS

The vulnerability of the usbread8 function in the drivers/staging/rtl8712/usbops.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4extmigrate function in the fs/ext4/migrate.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause a service failure...

rtl8712 DoS

Vulnerability of the r8712freedrvsw function in the drivers/staging/rtl8712/osintfs.c module – Support for additional device drivers in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

NVUE Interface Privilege Escalation

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the function icexskpoolsetup in the driver module drivers/net/ethernet/intel/ice/icexsk.c of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to...

CVE-2026-28727

CVE-2026-28727 : Local privilege escalation caused by insecure Unix socket permissions. Affected on macOS: Acronis Cyber Protect 17 before build 41186 and Acronis Cyber Protect Cloud Agent before build 41124. The CVSS vector indicates LOCAL access, low privileges required, no user interaction, wi...

mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...

CVE-2026-20016

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attack...

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

CVE-2026-24457

An unsafe parsing of OpenMQ's configuration in OpenMQ versions 6.5.2 and 6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ...

EUVD-2026-9834

Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Client login, peer authentication modules allows Reusing Session IDs aka Session Replay. Thi...

CVE-2026-24457

An unsafe parsing of OpenMQ's configuration in OpenMQ versions 6.5.2 and 6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ...