CVE-2026-47424

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-47424

OpenAM (Open Access Management) Community Edition through 16.0.6 contains a Protection Mechanism Failure (CWE-693) in the GroovySandboxValueFilter component of its server-side scripting sandbox. An authenticated user with the ability to create or edit scripts in an executed context — such as a su...

EUVD-2026-78367

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-19515

CVE-2026-19515 is an OS command injection vulnerability in the WSO2 Integrator MI VS Code extension . The extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources , allowing a crafted project to inject and execute...

CVE-2026-19515 OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

CVE-2026-19515 OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

EUVD-2026-78364

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

CVE-2026-77853

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

CVE-2026-77853

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

CVE-2026-77853

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

EUVD-2026-78332

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane NETCONF may execute arbitrary OS commands...

CVE-2026-90847

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

CVE-2026-90843

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmapnewscan of the file functionsnmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command...

CVE-2026-90847 EFM ipTIME C200E System Setup iux_set.cgi os command injection

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

CVE-2026-90847 EFM ipTIME C200E System Setup iux_set.cgi os command injection

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

EUVD-2026-78242

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

CVE-2026-90847

EFM ipTIME C200E version 1.094 is affected by an OS command injection in the iux_set.cgi file of the System Setup component. The attack is remote and requires high privileges (authenticated access), but upon success yields a scope change with high impact on confidentiality, integrity, and availab...

CVE-2026-90843 SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmapnewscan of the file functionsnmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command...

CVE-2026-90843 SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmapnewscan of the file functionsnmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command...

CVE-2026-90843

SabyasachiRana WebMap (up to commit 8b95fe4) contains an OS command injection in the nmap_newscan function within functions_nmap.py (New Nmap Scan Handler). By manipulating the target/params argument, an unauthenticated remote attacker can inject arbitrary commands. The exploit is disclosed publi...