CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77540

CVE-2026-77540 is a CRITICAL (CVSS 9.1) vulnerability in UniFi OS Server by Ubiquiti, caused by Improper Input Validation that allows a privileged network attacker to achieve Command Injection on the host device. The attack requires high privileges and no user interaction, with changed scope impa...

CVE-2026-77540

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-77539

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-77539

CVE-2026-77539 is a critical (CVSS 9.1) Improper Input Validation vulnerability in Ubiquiti UniFi OS Server . An attacker with network access and high privileges can exploit it to perform Command Injection on the host device, leading to high impact on confidentiality, integrity, and availability ...

CVE-2026-77536

CVE-2026-77536 is a Critical (CVSS 9.9) Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A malicious actor with network access and low privileges can exploit this flaw to escalate privileges within affected UniFi OS devices or instances, resulting in hi...

CVE-2026-77536

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77534

CVE-2026-77534 is an Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges within affected UniFi OS devices or instances. The CNA-assigned CVSS 3.1 score is 9.9 (CRITICAL) , ref...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

Vulnerabilities in DrayTek VigorSwitch

DrayTek has addressed several vulnerabilities in the VigorSwitch product line. These vulnerabilities primarily involve command injection, buffer overflows, null pointer dereferencing, directory traversal, and insufficient authorization checks in various functions of the DrayTek VigorSwitch device...

CVE-2026-77533

UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...

EUVD-2026-66378

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2025-29277

CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...

CVE-2025-64446_CVE-2025-58034

FortiWeb Remote Code Execution RCE Exploit über die CVE-2025-64446 + CVE-2025-58034-Kette Beschreibung Dieses Skript verkettet zwei kritische Schwachstellen in Fortinet FortiWeb, um eine nicht authentifizierte Remote-Codeausführung mit Root-Rechten zu erreichen: 1. CVE-2025-64446 –...

CVE-2026-58095

FreeBSD's ppp(8) (a setuid-root PPP implementation) contained a buffer overflow in mp_Enddisc() , which used incorrect length calculations when formatting multilink endpoint discriminator addresses. A malicious PPP peer could send a crafted endpoint option to overflow a global result buffer , pot...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2026-77548: Improper Input Validation

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-75364

Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...