EUVD-2026-102262

libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsimtpvolumevaluesreaddata that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jump li...

CVE-2026-111134

The libfwsi library, in versions through 20260522 , contains a heap out-of-bounds read vulnerability within the libfwsi_mtp_file_entry_values_read_data() function. This flaw allows attackers to read past buffer bounds by providing crafted MTP file entry shell items . Specifically, embedding a 10 ...

CVE-2026-110236

A flaw was found in KDE Dolphin. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted folder names containing shell metacharacters. When a victim double-clicks the folder view background, the application fails to properly escape the path parameter,...

CLSA-2026-1792080478 emacs: Fix of 3 CVEs

CVE-2026-77219: fix integer overflow in PBM image loader - CVE-2026-79992: restrict Tramp user names to prevent shell command injection - CVE-2026-108976: strengthen Tramp user and host name validation...

Moul SSHPortal authorization issue vulnerability

Moul SSHPortal versions 1.19.5 and earlier have an authorization vulnerability. This vulnerability stems from the lack of authorization in the 'key show' command used in the management shell. It may allow authenticated non-administrator users to obtain decrypted backend private SSH keys. These ke...

CodeWithCJ SparkyFitness command injection vulnerability

Versions of CodeWithCJ SparkyFitness prior to 1.6.0 have a command injection vulnerability. This vulnerability arises from the API/admin/backup/restore endpoints interpolating the names of uploaded files into shell commands. Certified global administrators can upload recovery archives whose file...

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States CIS. The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of...

WHEELS.DEV: Wheel commands injection vulnerability

WHEELS.DEV: Wheels 4.0.0 to 4.1.2 versions had a command injection vulnerability. This vulnerability stemmed from insufficient validation or escaping of values and package contents provided by callers. It allowed for the introduction of malicious inputs through CI variables, branch names, package...

Astra Linux - vulnerability in twisted

Twisted is an event-driven framework for Internet applications, supporting Python 3.6+. Prior to version 22.2.0, the Twisted SSH client and server implementation allowed accepting an infinite amount of data for the peer’s SSH version identifier. This eventually results in a buffer using all...

Astra Linux – Vulnerability in Gegl

The loadcache function in GEGL before version 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This issue arises due to the use of the system library function for executing the ImageMagick convert fallback in magick-load. NOTE: GEGL versions...

Astra Linux – Vulnerability in xterm

xterm before 375 allows code execution via font ops. For example, an OSC 50 response may trigger Ctrl-g, thereby leading to command execution within the vi line-editing mode of Zsh. NOTE: Font ops are not allowed in the default configurations of some Linux distributions for xterm...

Astra Linux – Vulnerability in JRuby

In versions of Ruby from 2.4.7, 2.5.x up to 2.5.6, and 2.6.x up to 2.6.4, code injection is possible if the first argument also known as the “command” argument passed to Shell or Shelltest in lib/shell.rb is untrusted data. An attacker can exploit this vulnerability to call arbitrary Ruby methods...

Astra Linux – vulnerability in emacs

In Org Mode, the org-babel-execute:latex command in ob-latex.el is available up to version 9.6.1 for GNU Emacs; this allows attackers to execute arbitrary commands by using a filename or directory name containing shell metacharacters...

Astra Linux – vulnerability in emacs

GNU Emacs up to version 28.2 allows attackers to execute commands using shell metacharacters in the name of a source-code file, as lib-src/etags.c utilizes a system C library function in its implementation of the etags program. For instance, a victim might use the “etags -u ” command as recommend...

Astra Linux – Vulnerability in xorg-server

A vulnerability was discovered in X.Org. This security flaw arises because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where the X server is running with privileged access, and may...

Astra Linux – Vulnerability in Less

Closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0073, there was an OS command injection vulnerability in the netrw standard plugin included with Vim. By prompting a user to open a specially crafted URL—for example, using the scp:// protocol handler—an attacker can execute...

Astra Linux – Vulnerability in zsh

In zsh before version 5.8.1, an attacker can gain code execution if they control the command output within the prompt, as demonstrated by using a %F argument. This occurs due to the recursive PROMPTSUBST expansion...

Astra Linux – vulnerability in openssh

In OpenSSH versions prior to 9.6, OS command injection may occur if a username or hostname contains shell metacharacters, and such names are referenced via expansion tokens in certain scenarios. For instance, an untrusted Git repository might contain a submodule with shell metacharacters in its...

Astra Linux – vulnerability in xorg-server

A heap buffer overflow flaw was found in the DisableDevice function within the X.Org server. This issue may result in an application crash or, under certain conditions, remote code execution in SSH X11 forwarding environments...