CVE-2026-82099

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-81550

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-79724

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-79724 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-79724

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an OS command injection vulnerability (CWE-78) caused by multiple incomplete code security controls and missing execution guards, including an incomplete denylist omitting process-spawning primitives, a logic error in the code scanner...

CVE-2026-81550 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-81550

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an OS command injection vulnerability caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can leverage this flaw to execute arbitrary code , resulting in high impact to confidential...

CVE-2026-82095 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82095

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an OS command injection vulnerability caused by improper neutralization of special elements in an OS command, allowing a remote authenticated attacker to execute arbitrary code. The vulnerability scores CVSS 3.1 8.8 (High) with network at...

CVE-2026-82098

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an OS command injection flaw (CWE-78) caused by improper neutralization of special elements used in an OS command. A remote authenticated attacker can leverage this to execute arbitrary commands , resulting in high impact on confidentiali...

CVE-2026-82099 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82099

CVE-2026-82099 affects IBM DataStage on Cloud Pak for Data 5.4.0.0 , where a remote authenticated attacker can execute arbitrary code due to OS command injection (CWE-78) — improper neutralization of special elements in an OS command. The vulnerability is network-exploitable with low complexity a...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

CVE-2026-19136

A potential command injection vulnerability affects the Tianxi AI Agent PC Application , distributed exclusively in the Chinese market. If a local user opens a specially crafted link handled by the application, it could allow execution of operating system commands, resulting in high impact to con...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

EUVD-2026-75751

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

Zimbra-CVE-2026-73570-Rules

Reglas de Wazuh para CVE-2026-73570 Inyección de comandos del sistema operativo en Zimbra Reglas de detección para CVE-2026-73570 , una inyección de comandos del sistema operativo en Zimbra Collaboration Suite a través del parámetro de notificación de trampas SNMP snmpnotify. Vulnerabilidad...

CVE-2026-26833

CVE-2026-26833: thumbler 中的操作系统命令注入 摘要 thumbler 版本 1.1.2 及之前版本在 lib/thumbler.js 的 thumbnail 函数中存在操作系统命令注入漏洞。该包将 input、output、time 和 size 值拼接成一个 ffmpeg 命令字符串，并使用 childprocess.exec 执行该字符串。攻击者如果能够控制这些值中的任意一个，就可以注入 shell 语法并执行任意命令。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- thumbler| 所有 1.1.2 及之前版本| 截至...

CVE-2026-26831

CVE-2026-26831: Inyección de comandos del sistema operativo en textract Resumen textract hasta la versión 2.5.0 permite la inyección de comandos del sistema operativo a través de la ruta de archivo proporcionada a varios extractores. Varias rutas de código pasan esa ruta de archivo a...

CVE-2026-73693

FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary commands by uploading files with shell metacharacters in their names. Attackers can upload a file containing command...