WatchGuard Fireware OS authorization issue vulnerability

Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, from version 12.0 up to and including 12.12.4, and from version 12.0 up to and including 12.5.22. These vulnerabilities stem from a lack of authentication during FireCluster Sync processing,...

CVE-2026-92375: Improper Access Control

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

CVE-2026-103593: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...

CVE-2026-102815: Improper Neutralization of Special Elements used in an OS Command

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

Sunhillo SureLine session mechanism vulnerability

Versions prior to Sunhillo SureLine 9.1.5 contain a vulnerability related to the session mechanism. This vulnerability stems from authentication bypass; unauthenticated remote attackers can forge session cookies containing only plaintext usernames, lacking random identifiers or integrity checks. ...

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution RCE via UPnP root description parsing...

RockyLinux 8 : flatpak (RLSA-2026:89859)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89859 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...

PLANET IGS-5225-8P2T4S OS Command Injection (CVE-2026-81942)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

RockyLinux 9 : flatpak (RLSA-2026:89850)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89850 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...

CVE-2026-78845: Undefined Security Weakness

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution RCE via UPnP root description parsing...

PT-2026-126623

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

PLANET IGS-5225-8P2T4S Active Debug Code (CVE-2026-81943)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

Juniper Networks Junos OS CLI Command Injection

The vulnerability in the command-line interface CLI of the Juniper Networks Junos OS MX Series routers is related to improper handling of special elements. Exploitation of this vulnerability enables an attacker to execute arbitrary commands with root privileges and gain unauthorized access to...

AiDot Linkind Matter Smart Plug security vulnerability

Versions 1.01.32 of AiDot Linkind Matter Smart Plug, 3.15.21 of OREiN Matter Smart Light Bulb, and 3.30.17 of Linkind Wi-Fi Smart Light Bulb contain a security vulnerability stemming from an issue in UPnP root description parsing. This vulnerability may lead to remote code execution...

SuperMicro MBD-X12SPI command injection vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains a command injection vulnerability. This vulnerability arises because IPMI authentication administrators can execute commands on the BMC using the operating system root user...

CVE-2026-78845

Aidot products, specifically the Linkind Matter Smart Plug 1.01.32 , OREiN Matter Smart Light Bulb 3.15.21 , and Linkind Wi-Fi Smart Light Bulb 3.30.17 , are vulnerable to Remote Code Execution (RCE) . The root cause is improper parsing of the UPnP root description . This vulnerability is associa...

PT-2026-127217

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection...

Juniper Networks Junos OS Evolved Privilege Escalation

The gRPC vulnerability in Juniper Networks Junos OS Evolved is related to improper handling of format strings. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service, gain unauthorized access to protected information, or execute arbitrary code with root...

CVE-2026-112350: Improper Limitation of a Pathname to a Restricted Directory

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers...

WatchGuard Fireware OS path traversal vulnerability

Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, as well as versions from 12.0 up to and including 12.12.4 and from 12.0 up to and including 12.5.22. These vulnerabilities stem from a link-following issue in the firewall daemon. Local...