CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...

CVE-2026-88273

GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...

PT-2026-89315

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...

PT-2026-89494

Warning: A critical path traversal vulnerability in Plesk Backup Manager allows arbitrary root file writes by authenticated customers. CVE-2026-68487 CVSS3.0: 9.9. Read the advisory https://t.co/GniZ2f5Oox and Patch Patch Patch...

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published the...

CVE-2026-21102

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

CVE-2026-21102

This critical (CVSS 4.0: 9.3) vulnerability is a use-after-free in the DualDAR component of Samsung mobile devices, prior to the SMR September 2026 Release 1 . A local privileged attacker can leverage the flaw to execute arbitrary code with root privileges , resulting in high impact on confidenti...

CVE-2026-21102

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

CVE-2026-21102

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

EUVD-2026-74643

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

EUVD-2026-74642

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...

CVE-2026-21102: Use After Free

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege...

CVE-2026-21101: Improper Input Validation

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

PT-2026-88835

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

CVE-2026-53581

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

EUVD-2026-74293

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...