PT-2026-118320

Name of the Vulnerable Software and Affected Versions Cloud Shell versions prior to 2026-07-22 Description A Cross-Site WebSocket Hijacking flaw allows an unauthenticated attacker to hijack an active session and exfiltrate the user's OAuth access token. This is achieved through a cross-origin...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791485785)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791485785 advisory. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored...

RHEL 8 : emacs (RHSA-2026:80506)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80506 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp,...

AlmaLinux 9 : emacs (ALSA-2026:80507)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80507 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

AlmaLinux 8 : emacs (ALSA-2026:80506)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

Ginlix AI LangAlpha security vulnerability

Ginlix AI LangAlpha versions 2026.09.07 and earlier contain a security vulnerability stemming from indirect prompt injection. Due to the absence of allowlists and manual approvals for Bash and ExecuteCode, attackers can insert commands into web pages retrieved by the proxy, thereby executing shel...

PT-2026-118362

Nokia 1830 Global Express GX is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is no...

Joern 4.0.661

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-118361

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

PT-2026-117939

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell run commands without confirmation because the headless presenter's execution allowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by...

PT-2026-117947

Name of the Vulnerable Software and Affected Versions Langchain-Chatchat versions prior to 0.3.1.4 Description The software exposes a POST '/tools/call' API endpoint that allows the invocation of any registered tool by name without authentication. Because the shell tool is registered by default,...

PT-2026-117950

Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...

PT-2026-117935

Name of the Vulnerable Software and Affected Versions LangAlpha versions prior to 2026.09.07 Description An indirect prompt injection allows remote attackers to execute shell commands or Python by placing instructions within web content retrieved by the agent. This occurs because the Bash and...

PT-2026-117949

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from bypassing CLI ACLs. Low-privilege authenticated attackers can circumvent the SSH isolation mechanism through custom SSH commands, thereb...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from issues with local privilege escalation in the management shell interface. Local attackers who are authenticated and have restricted shel...

MySQL 9.7 -- Multiple vulnerabilities

Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for Oracle MySQL, 29 of which may be remotely exploitable without authentication. The patches for MySQL Server 9.7 are contained in release 9.7.4. MySQL Shell is affected through the MySQL sources it bundles a...

CLSA-2026-1792442514 cifs-utils: Fix of CVE-2022-27239

CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...

CLSA-2026-1792442320 cifs-utils: Fix of CVE-2022-27239

CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...

CVE-2026-109437

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...