CVE-2026-116778: Improper Neutralization of Special Elements used in an OS Command

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/id/edit to modify Storage Node...

PT-2026-128282

Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Conductor affected versions not specified Description An improper neutralization of special elements used in an OS command within the AutomatedProvisioner allows a remote attacker to execute arbitrary commands wi...

PT-2026-128231

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

PT-2026-128285

Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Router affected versions not specified Description A missing authentication flaw in a critical function allows an unauthenticated network-based attacker to gain administrative privileges. This is achieved by...

PT-2026-128324

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

PT-2026-128325

Name of the Vulnerable Software and Affected Versions Alpine iLX-F511 affected versions not specified Description An issue exists in the Android Auto service where the system fails to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This...

CVE-2026-118609: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118610: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

PT-2026-128323

Alpine iLX-F511 libanwbtstack.so prh rfcomm cc process test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the abili...

PT-2026-128277

An Improper Link Resolution Before File Access 'Link Following' vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. Th...

PT-2026-129128

Name of the Vulnerable Software and Affected Versions Sophos UTM affected versions not specified Description A path traversal issue allows a remote unauthenticated attacker to execute arbitrary code as root. This occurs when the email proxy is used with scanning enabled and the attacker...

CVE-2026-118606: Exposed Dangerous Method or Function

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This flaw arises because the prhrfcommccprocesstest function fails to properly validate user-supplied data, allowing data beyond the bounds of allocated buffers to be read. This could enable nearby network attacker...

PT-2026-128318

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This flaw arises because the Android Auto connection handler fails to properly validate the length of user-supplied data prior to copying it into a fixed-length stack buffer. As a result, attackers with physical...

Alpine iLX-F511 permission and access control vulnerability

The Alpine iLX-F511 version 7.0.000 contains a vulnerability related to permission escalation and access control. This issue stems from a dangerous function exposed in the framework service, which may allow network-neighboring attackers to execute arbitrary code with root privileges without...

PT-2026-128317

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target syste...

Alpine iLX-F511 command injection vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a command injection vulnerability. This flaw arises because the diagapp component executes system calls without properly validating user-supplied strings, potentially allowing attackers with physical access to execute arbitrary code as root...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This vulnerability arises because the length of user-supplied data is not properly validated prior to copying it into the heap buffer during Bluetooth OBEX packet processing. As a result, physical presence attacker...

CVE-2026-118611: Heap-based Buffer Overflow

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...