CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

tapo-c260-rce

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept exploit chain for TP-Link Tapo C260 IP camera achieving unauthenticated-to-root RCE by chaining three vulnerabilities discovered by Eugene Lim Spaceraccoon. Credit All vulnerability research and discovery byEugene...

TencentOS Server 4: lrzsz (TSSA-2026:1207)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1207 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2026-65184

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184 Avocent ACS8000 wsserver command injection

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184 Avocent ACS8000 wsserver command injection

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184

The Avocent ACS8000 is vulnerable to an OS command injection flaw in its root-privileged wsserver terminal-bridge daemon. The daemon constructs shell commands using client-supplied WebSocket fields and passes them to system() and popen() functions without proper quoting, escaping, or character-se...

EUVD-2026-109933

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

Vertiv Avocent ACS8000 command injection vulnerability

Vertiv Avocent ACS8000 versions 2.32.4 and earlier contain a command injection vulnerability. This vulnerability arises because the wsserver terminal bridge daemon, which runs with root privileges, constructs shell commands from WebSocket fields provided by clients and passes them to the system a...

PT-2026-123356

Name of the Vulnerable Software and Affected Versions Avocent ACS8000 versions prior to 2.32.4 Description The root-privileged wsserver terminal-bridge daemon allows a connected client to execute arbitrary commands on the appliance as root. This occurs because the daemon constructs a shell comman...

Important: lrzsz

Issue Overview: lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped...

Amazon Linux 2 : lrzsz (ALAS-2026-4031)

The version of lrzsz installed on the remote host is prior to 0.12.20-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4031 advisory. lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote sende...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: lrzsz (UTSA-2026-142360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142360 advisory. lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying...

CVE-2026-113802

Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...

EUVD-2026-105226

Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...

PT-2026-118590

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A versions prior to M30BE1 V251117 Description An OS command injection flaw exists in the sub 23B54 function of the ioos binary. The issue occurs when the /protocol.csp?opt=ovpn file endpoint processes requests with type=de...

Astra Linux - vulnerability in pyyaml

PyYAML versions 5.1 through 5.1.2 suffer from insufficient restrictions on the load and loadall functions due to a class deserialization issue; for example, Popen is a class within the subprocess module. NOTE: This issue arises because a fix for CVE-2017-18342 is incomplete...

rpm: Command injection in rpmuncompress via unescaped filenames passed to popen()

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...

pfsense-ipsec-login-banner

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-109108

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly an...