CVE-2026-65184

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184 Avocent ACS8000 wsserver command injection

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

EUVD-2026-109933

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184

The Avocent ACS8000 is vulnerable to an OS command injection flaw in its root-privileged wsserver terminal-bridge daemon. The daemon constructs shell commands using client-supplied WebSocket fields and passes them to system() and popen() functions without proper quoting, escaping, or character-se...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

tapo-c260-rce

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept exploit chain for TP-Link Tapo C260 IP camera achieving unauthenticated-to-root RCE by chaining three vulnerabilities discovered by Eugene Lim Spaceraccoon. Credit All vulnerability research and discovery byEugene...

CVE-2026-113802

Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...

EUVD-2026-105226

Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...

PT-2026-118590

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A versions prior to M30BE1 V251117 Description An OS command injection flaw exists in the sub 23B54 function of the ioos binary. The issue occurs when the /protocol.csp?opt=ovpn file endpoint processes requests with type=de...

CVE-2026-109108

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...

CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...

CVE-2026-109108

A security vulnerability exists in Wavlink WL-WN530BE1-A (version 251117) involving OS command injection in the /cgi-bin/uploadVpn.cgi file. The root cause is the improper handling of the Type argument within the popen function, which allows a remote attacker to execute arbitrary commands. Public...

PT-2026-111302

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A version 251117 Description A remote OS command injection exists in the /cgi-bin/uploadVpn.cgi endpoint. The issue occurs when the Type variable is manipulated, affecting the popen function. OS command injection is a flaw...

CVE-2026-109108: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...

Linux Distros Unpatched Vulnerability : CVE-2026-105841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by...

AZL-106673 CVE-2026-105841 affecting package lrzsz 0.12.20-50

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

EUVD-2026-93393

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2026-105841 lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2026-105841 lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2026-105841

The lrzsz utility, in versions before 0.13.0 , is vulnerable to an OS command injection in the lrz receive utility's pipe mode. The root cause is located in src/lrz.c, where the procheader() function passes unescaped ZMODEM/YMODEM filenames to popen() when running under a suffixed name like lrzta...