79766 matches found
CVE-2026-107347: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log…
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the clien...
PT-2026-132797
Name of the Vulnerable Software and Affected Versions WiFiman Desktop affected versions not specified Description A local actor with low privileges can exploit an External Control of File Name or Path issue to execute arbitrary commands with root privileges on the host device. External Control of...
EUVD-2026-112934
The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...
U-SPEED WIFI4 N300 security vulnerability
The U-SPEED WIFI4 N300 running version 1.0.0 contains a security vulnerability. This vulnerability stems from the exposure of the UART debugging interface and the absence of authentication, authorization, and access control mechanisms. It may allow attackers to gain an unauthenticated root shell...
Ubiquiti WiFiman Desktop for macOS input validation error vulnerability
Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0 contain an input validation error vulnerability stemming from improper control over external filenames or paths. Attackers with local access and low privileges can exploit this vulnerability to execute arbitrary commands on the host devic...
PT-2026-132062
Details and PoC are public for two unpatched free5GC vulnerabilities in the 5G core: BSF auth bypass CVE-2026-115926 and an exposed root CA key. free5GC 5G 5GCore Telecom CVE2026115926 CVE2026115925 PoC OpenSource https://t.co/LuMpsOvtsZ...
PT-2026-132770
Name of the Vulnerable Software and Affected Versions Nomad versions prior to 2.1.1 Nomad Enterprise versions prior to 2.1.0 Nomad Enterprise versions prior to 1.11.12 Nomad Enterprise versions prior to 1.10.18 Description HashiCorp Nomad and Nomad Enterprise are susceptible to symlink following...
PT-2026-132849
Name of the Vulnerable Software and Affected Versions SOCFortress CoPilot versions prior to 0.1.76 Description Low-privilege users with the customer user role can upload malicious case-report templates via the /case-report-template/upload endpoint. The system only validates the filename-derived...
Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3337)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3337 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra...
HashiCorp Nomad backlink vulnerability
HashiCorp Nomad and HashiCorp Nomad Enterprise versions 0.3.0 through 2.1.0 contain a post-link vulnerability. This vulnerability stems from a symbolic link traversal issue during dispatch payload and executor log writing, potentially allowing malicious workloads to modify files outside their...
CVE-2026-79589
The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...
CVE-2026-107039: n/a: Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode…
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a device reset or Denial of Service DoS...
Update bundle signature bypass in Guardian/CMC before 26.4.0
Summary A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. Impact An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but...
Medium: ca-certificates
Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...
Nozomi Networks Guardian command injection vulnerability
Versions prior to Nozomi Networks Guardian 26.4.0 and Nozomi Networks CMC 26.4.0 contain a command injection vulnerability. This vulnerability stems from insufficient validation of update package contents by the update installation functionality; it is susceptible to OS command injection attacks...
CVE-2026-79589: n/a: The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an…
The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...
PT-2026-132073
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
CVE-2026-119250: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with local access and low privileges could exploit an External Control of File Name or Path…
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...
PT-2026-132072
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2022-20186
Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...