79324 matches found
CVE-2026-65184
The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...
CVE-2026-115930
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
UBUNTU-CVE-2026-99098
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
CVE-2026-99098
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
EUVD-2026-109904
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...
ROOT-OS-UBUNTU-2504-CVE-2026-109619 CVE-2026-109619 in php8.4 - Patched by Root
Root has patched CVE-2026-109619 in the php8.4 package for Root:Ubuntu:25.04. Multiple fixed versions available...
CVE-2026-77059 TOCTOU Race Condition in boneIO
boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...
CVE-2026-77055 Improper Privilege Assignment in boneIO
boneIO blackdebianimages gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This issue was fixed in version 1.6.0: the ima...
CVE-2026-59107
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...
CVE-2026-115188
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...
CVE-2026-65184 Avocent ACS8000 wsserver command injection
The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...
CVE-2026-65184
The Avocent ACS8000 is vulnerable to an OS command injection flaw in its root-privileged wsserver terminal-bridge daemon. The daemon constructs shell commands using client-supplied WebSocket fields and passes them to system() and popen() functions without proper quoting, escaping, or character-se...
EUVD-2026-109933
The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...
MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
EUVD-2026-109828
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...
CVE-2026-59107 Shared SSH Authentication Key in vSolution Matrix File Sharing
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...
CVE-2026-59107
A security vulnerability exists in the vSolution Matrix file sharing feature , specifically affecting devices configured as a main/master station with file sharing enabled. Due to a shared cryptographic trust configuration , an attacker who obtains the matching private key can perform an SSH auth...
ROOT-APP-PYPI-CVE-2026-59203 CVE-2026-59203 in pillow - Patched by Root
Root has patched CVE-2026-59203 in the pillow package for Root:PyPI. Multiple fixed versions available...