38466 matches found
TencentOS Server 3: libxml2 (TSSA-2026:0993)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0993 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2026-88810
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
PT-2026-89209
Name of the Vulnerable Software and Affected Versions webhookd versions prior to 1.22.0 Description Deployments without htpasswd authentication forward all incoming HTTP headers into the hook script environment via the HTTPParamsToShellVars function in pkg/api/index.go without using an allowlist...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that man...
CVE-2026-78630
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
firefox: Privilege escalation in the Shell Integration component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
EUVD-2026-74182
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
CVE-2026-78630
CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...
Exploit for Execution with Unnecessary Privileges in Olivetin
OliveTin — unauthenticated action execution → RCE + CVE-2026-...
Exploit for CVE-2026-82222
⚡ GHOSTLYR00T - GiveWP RCE Exploit Framework...
CVE-2026-82537
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
CVE-2026-82536
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...
CVE-2026-70563
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-69829
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-69606
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...