77978 matches found
CVE-2026-111220 Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit...
CVE-2026-111219
Netgate pfSense CE versions through 2.9.0 are vulnerable to a command injection flaw located in services_pppoe_edit.php. The issue stems from a newline injection vulnerability where the application fails to validate username POST fields . A user with PPPoE Server Edit privileges can inject entrie...
CVE-2026-111219 Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username
Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making...
CVE-2026-111217 Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as root by storing an unvalidated CARP VHID. Attackers can supply a VHID containing shell metacharacters that executes via...
CVE-2026-111217
Netgate pfSense CE versions through 2.9.0 are vulnerable to an OS command injection flaw. The vulnerability arises from the storage of an unvalidated CARP VHID , which allows authenticated users with Virtual IP edit privileges to execute commands as root . Attackers can provide a VHID containing ...
CVE-2026-111218 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a...
CVE-2026-111218
Netgate pfSense CE 2.7.0 through 2.9.0 is vulnerable to an OS command injection vulnerability within the Traffic Shaper Limiters . Authenticated users possessing Traffic Shaper Limiters privileges can execute commands as root by tampering with the limiter number field . The flaw occurs because th...
EUVD-2026-102330
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a...
CVE-2026-111216
Netgate pfSense CE through version 2.9.0 is vulnerable to an OS command injection vulnerability. Authenticated users with gateway edit privileges can execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. The root cause is that the start_dpinger() function ...
EUVD-2026-102327
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...
CVE-2026-111214
Netgate pfSense CE versions 2.7.0 through 2.9.0 are vulnerable to an OS command injection flaw within the interfaces_qinq_edit.php component. The root cause is the storage of an unvalidated parent interface name . An authenticated user with QinQ edit privileges can save a crafted 'if ' value; whe...
CVE-2026-111215
Netgate pfSense CE through version 2.9.0 is vulnerable to an OS command injection flaw. The vulnerability exists because the interface_wireless_clone() function interpolates unescaped input into an ifconfig shell command. Authenticated users with limited Wireless Edit or Interface Assignments pri...
CVE-2026-111215 Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...
CVE-2026-111214 Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated...
CVE-2026-110005
A flaw was found in Komodo. The periphery agent's container-management functionality passes container names directly into an operating system shell without proper escaping. An authenticated user with low privileges can supply specially crafted container names to execute arbitrary commands with ro...
CVE-2026-84731
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...
EUVD-2026-102206
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...
ROOT-APP-NPM-CVE-2026-33916 CVE-2026-33916 in handlebars - Patched by Root
Root has patched CVE-2026-33916 in the handlebars package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-77310 CVE-2026-77310 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-77310 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...