Authenticated RCE in update functionality in Guardian/CMC before 26.4.0

Summary Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. Impact An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes...

Nozomi Networks Guardian encryption issue vulnerability

Versions prior to Nozomi Networks Guardian 26.4.0 and CMC 26.4.0 contain an encryption vulnerability. This vulnerability stems from inconsistent validation of update package contents by the update installation functionality. As a result, attackers with administrative privileges can remotely deliv...

ArubaOS 8.10.x < 8.10.0.24 / 8.13.x < 8.13.3.1 Multiple Vulnerabilities (HPESBNW05162)

The version of ArubaOS AOS-8 installed on the remote host is affected by multiple vulnerabilities as referenced in the HPESBNW05162 advisory: - Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands ...

CVE-2026-79589

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

Ubiquiti WiFiman Desktop for macOS input validation error vulnerability

Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0 contain an input validation error vulnerability stemming from improper control over external filenames or paths. Attackers with local access and low privileges can exploit this vulnerability to execute arbitrary commands on the host devic...

EUVD-2026-112934

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

U-SPEED WIFI4 N300 security vulnerability

The U-SPEED WIFI4 N300 running version 1.0.0 contains a security vulnerability. This vulnerability stems from the exposure of the UART debugging interface and the absence of authentication, authorization, and access control mechanisms. It may allow attackers to gain an unauthenticated root shell...

PT-2026-132062

Details and PoC are public for two unpatched free5GC vulnerabilities in the 5G core: BSF auth bypass CVE-2026-115926 and an exposed root CA key. free5GC 5G 5GCore Telecom CVE2026115926 CVE2026115925 PoC OpenSource https://t.co/LuMpsOvtsZ...

PT-2026-132849

Name of the Vulnerable Software and Affected Versions SOCFortress CoPilot versions prior to 0.1.76 Description Low-privilege users with the customer user role can upload malicious case-report templates via the /case-report-template/upload endpoint. The system only validates the filename-derived...

CVE-2026-107347: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log…

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the clien...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3337)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3337 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra...

PT-2026-132770

Name of the Vulnerable Software and Affected Versions Nomad versions prior to 2.1.1 Nomad Enterprise versions prior to 2.1.0 Nomad Enterprise versions prior to 1.11.12 Nomad Enterprise versions prior to 1.10.18 Description HashiCorp Nomad and Nomad Enterprise are susceptible to symlink following...

PT-2026-132797

Name of the Vulnerable Software and Affected Versions WiFiman Desktop affected versions not specified Description A local actor with low privileges can exploit an External Control of File Name or Path issue to execute arbitrary commands with root privileges on the host device. External Control of...

PT-2026-132073

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

CVE-2026-107039: n/a: Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode…

Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a device reset or Denial of Service DoS...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

HashiCorp Nomad backlink vulnerability

HashiCorp Nomad and HashiCorp Nomad Enterprise versions 0.3.0 through 2.1.0 contain a post-link vulnerability. This vulnerability stems from a symbolic link traversal issue during dispatch payload and executor log writing, potentially allowing malicious workloads to modify files outside their...

CVE-2026-79589

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

Nozomi Networks Guardian command injection vulnerability

Versions prior to Nozomi Networks Guardian 26.4.0 and Nozomi Networks CMC 26.4.0 contain a command injection vulnerability. This vulnerability stems from insufficient validation of update package contents by the update installation functionality; it is susceptible to OS command injection attacks...

CVE-2026-119250: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with local access and low privileges could exploit an External Control of File Name or Path…

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...