966 matches found
EUVD-2026-75307
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-0304
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...
CVE-2026-0304
CVE-2026-0304 has been reserved by an organization or individual for a future security announcement. No concrete technical details, affected products, or impact are publicly available in the provided documents. Monitor for updates when the candidate is publicized.
CVE-2026-0309
CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
PT-2026-89277
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
PT-2026-89316
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
PT-2026-89317
🚨 HIGH SEVERITY: CVE-2026-88276 CVSS 7.2 GeoVision GV-LPC2211 V1.13 vulnerable to command injection via WEP key values. Allows arbitrary code execution as root. Admins: Review device configs immediately. CVE Vulnerability PatchNow https://t.co/I9snAGnoKZ...
PT-2026-89313
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-88275: Improper Neutralization of Special Elements used in an OS Command
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
PT-2026-89318
🚨 HIGH: CVE-2026-88277 CVSS 8.8 - GeoVision GV-LPC2211 V1.13 vulnerable to authenticated command injection via ONVIF. Attackers can execute arbitrary commands as root. Patch immediately. CVE Vulnerability PatchNow https://t.co/0HQ3GCjvsH...
CVE-2026-88276: Improper Neutralization of Special Elements used in an OS Command
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-0309: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
PT-2026-89323
🚨 HIGH: CVE-2026-88282 CVSS 7.2 GeoVision GV-LPC2211 V1.13 vulnerable to command injection via FTP username with shell metacharacters. Admin-level exploit leads to arbitrary root command execution. CVE Vulnerability PatchNow https://t.co/IQAFupHc3X...
CVE-2026-88277: Improper Neutralization of Special Elements used in an OS Command
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...
...[ More ]
This Metasploit module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read an...