PT-2026-96258

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.3-lts Description An issue exists in the model parameter form route where the system authorizes the workspace path but the ModelSerializer.ModelParams function loads and saves a model using only the id without...

PT-2026-96316

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description OpenAI-compatible completion endpoints fail to validate the tp size parameter within kv transfer params. In prefill/decode disaggregated deployments, an attacker can provide arbitrary values for tp siz...

PT-2026-96314

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description A denial of service issue exists in P2P KV offloading when the OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. An attacker can provide arbitrary remote...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371

A command injection vulnerability exists in marcopiovanello/yt-dlp-web-ui up to v4 , specifically in the NewGenericDownload function within server/internal/downloaders/generic.go. Manipulation of the params argument allows a remote, unauthenticated attacker to execute arbitrary commands with no u...

CVE-2026-93371: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

PT-2026-95293

Name of the Vulnerable Software and Affected Versions NEX-Forms – Ultimate Forms Plugin for WordPress versions prior to 9.3.1 Description An issue exists where authenticated attackers with custom-level access and above can perform a generic SQL Injection. This occurs because the additional params...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-92993

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...

CVE-2026-92993

Dromara mayfly-go (up to 1.11.5 ) is vulnerable to an OS command injection via the RunMachineScript function in server/internal/machine/api/machine_script.go (Machine Script Feature). Remote attackers with the machine:script:run permission and tag access can achieve arbitrary command execution on...

CVE-2026-77404

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path...

PT-2026-93620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ALSA PCM component between non-atomic operations and the trigger-start operation. While concurrent state transitions between atomic PCM operations are...

CVE-2026-90843 SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmapnewscan of the file functionsnmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command...

PT-2026-91768

Name of the Vulnerable Software and Affected Versions SabyasachiRana WebMap versions prior to 3d52f65803a2716bff14d938352c6fef45b0cfb6 Description An OS command injection flaw exists in the New Nmap Scan Handler component. The issue occurs within the nmap newscan function located in the functions...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For Wi-Fi-related modules, such as mwifiex: The issue of warning messages during memcpy operations that span entire fields has been fixed in mwifiexconfigscan. To address this issue, replace the one-element array in the struct...

PT-2026-90850

Name of the Vulnerable Software and Affected Versions SIPp versions prior to 3.7.8 Description A stack buffer overflow occurs in the createAuthHeader function when processing SIP authentication challenges that contain oversized algorithm parameters. A malicious SIP server can exploit this by...

EUVD-2026-76628

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

CVE-2026-89552

This Linux kernel vulnerability affects param_set_charp() in the kernel's params subsystem. The root cause is that the previous parameter value is freed before the replacement allocation succeeds; if kmalloc_parameter() fails, the parameter is left as NULL , leading to a kernel NULL pointer deref...

PT-2026-90268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the param set charp function where character pointer parameters are stored in allocated memory. When a parameter is updated, the previous value is released before the...

PT-2026-86966

Name of the Vulnerable Software and Affected Versions D-Link DIR-822A A 101 Description A remote out-of-bounds write can occur within the L2TP Control Message Parser component. This issue is triggered by the tunnel set params function, allowing an attacker to write data beyond the allocated memor...