CVE-2026-120197

A flaw in the WAVLINK WL-WN530HG4B M_V260724 allows for OS command injection due to improper neutralization of special elements. The vulnerability exists in the port_forward function within the /cgi-bin/wapi.cgi file, specifically when the Name argument is manipulated. This issue can be triggered...

CVE-2026-120196

A vulnerability exists in the WAVLINK WN579X3-D (firmware V250402 ) device. The port_forward function within the /cgi-bin/wapi.cgi file is susceptible to OS command injection when the Name argument is manipulated. This vulnerability can be exploited remotely . An exploit is currently publicly ava...

CVE-2026-39884: Improper Neutralization of Argument Delimiters in a Command

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the portforward tool in src/tools/portforward.ts, where a kubectl command is constructed via string concatenation with user-controlle...

CVE-2026-39884

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the portforward tool in src/tools/portforward.ts, where a kubectl command is constructed via string concatenation with user-controlle...