ROOT-OS-DEBIAN-12-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-19931 CVE-2026-19931 in curl - Patched by Root

Root has patched CVE-2026-19931 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-5545 CVE-2026-5545 in curl - Patched by Root

Root has patched CVE-2026-5545 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-6253 CVE-2026-6253 in curl - Patched by Root

Root has patched CVE-2026-6253 in the curl package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-111962

The WP Remote Users Sync WordPress plugin versions prior to 2.2.0 is vulnerable to unauthenticated sensitive data disclosure . The plugin fails to properly restrict access to user export files stored beneath the public web root, as it relies on an Apache access-control file that is ignored by oth...

Hijacker

Hijacker Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with ...

ROOT-APP-GOBINARY-CVE-2026-34986 CVE-2026-34986 in github.com/go-jose/go-jose/v4 - Patched by Root

Root has patched CVE-2026-34986 in the github.com/go-jose/go-jose/v4 package for Root:Go. Multiple fixed versions available...

CVE-2026-84730

Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more...

CVE-2026-84730

Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more...

EUVD-2026-116688

Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more...

CVE-2026-84730

Certain ASUS Router firmware versions are vulnerable to a stack-based buffer overflow (CWE-121) within the AiCloud Feature . An unauthenticated nearby attacker can exploit this by providing a crafted device name to execute arbitrary commands with root privileges . For remediation, users should re...

PT-2026-136976

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers without administrator-level access to execute arbitrary commands on the device as root. This is due to insufficient inpu...

PT-2026-137091

On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root privileges on the device. Within Wi‑Fi coverage, the attacker may perform aud...

CVE-2026-39431: n/a: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service…

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers without administrator-level access to execute arbitrary commands on the device as root. This is due to insufficient inpu...

PT-2026-136900

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.1.1 Description An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context, which operates with root privileges. This occurs when the system...

EUVD-2026-116924

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers without administrator-level access to execute arbitrary commands on the device as root. This is due to insufficient inpu...

PT-2026-136901

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.1.1 Description An issue exists where the system trusts a file path provided in externally supplied Large File Transfer LFT attachment metadata. An unauthenticated remote sender can exploit th...

CVE-2026-39431

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers without administrator-level access to execute arbitrary commands on the device as root. This is due to insufficient inpu...

CVE-2026-39431

The HP Poly EagleEye Cube USB 1.3.1-001267 is vulnerable to command injection within a management service accessible via USB. The root cause is insufficient input validation during the CSR certificate generation process. An attacker without administrator-level access can exploit this to execute a...

CVE-2026-109518: Debian, Ubuntu APT: On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic…

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic including a malicious mirror or proxy between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified...