Ginlix AI LangAlpha security vulnerability

Ginlix AI LangAlpha versions 2026.09.07 and earlier contain a security vulnerability stemming from indirect prompt injection. Due to the absence of allowlists and manual approvals for Bash and ExecuteCode, attackers can insert commands into web pages retrieved by the proxy, thereby executing shel...

PT-2026-118361

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

PT-2026-117939

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell run commands without confirmation because the headless presenter's execution allowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by...

PT-2026-117947

Name of the Vulnerable Software and Affected Versions Langchain-Chatchat versions prior to 0.3.1.4 Description The software exposes a POST '/tools/call' API endpoint that allows the invocation of any registered tool by name without authentication. Because the shell tool is registered by default,...

PT-2026-117950

Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...

PT-2026-118362

Nokia 1830 Global Express GX is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is no...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791485785)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791485785 advisory. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored...

AlmaLinux 8 : emacs (ALSA-2026:80506)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

CLSA-2026-1792442514 cifs-utils: Fix of CVE-2022-27239

CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...

CLSA-2026-1792442320 cifs-utils: Fix of CVE-2022-27239

CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...

CVE-2026-109437

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...

CVE-2026-109437 Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...

CVE-2026-109437 Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...

CVE-2026-109437 Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...

CVE-2026-109437

The Cognition software (versions prior to 0.13.0 ) is vulnerable to unauthenticated remote code execution (RCE) . The root cause is the lack of authentication on the REST/SSE API combined with the agent sandbox backend defaulting to local execution . An attacker can exploit this by creating a ses...

CVE-2026-109437

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST...

CVE-2026-111057

The Mercury Python framework (versions 3.0.0 to 3.2.3 ) is vulnerable to an access control bypass due to a missing comma in the BLOCKED_PATTERNS variable. This error concatenates the /lab and /api/terminals regular-expression literals, allowing unauthenticated requests to /api/terminals to bypass...

CVE-2026-111057 Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKEDPATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint...

CVE-2026-111057 Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKEDPATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from issues with local privilege escalation in the management shell interface. Local attackers who are authenticated and have restricted shel...