QuantaStor alertConfigSet smtpPassword command injection

Authenticated JSON-RPC alertConfigSet writes an unsanitized smtpPassword into the root qsservice alert email shell command; alertRaise triggers execution as root delayed async dispatch. !/usr/bin/env python3 -- coding: utf-8 -- """OSNexus QuantaStor alertConfigSet smtpPassword command injection...

OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE — Detect

Fingerprint / reachability check for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE""" from kittysploit import from...

CVE-2026-111616

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

CVE-2026-111616 Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

EUVD-2026-103038

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

CVE-2026-111616 Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

CVE-2026-111616

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

CVE-2026-111616

The Oqtane Framework through version 10.2.6 contains an authorization bypass vulnerability within the SettingController . This flaw allows an attacker with the Administrators role on one site to access another co-tenant site's private settings by requesting a different site's entityId through the...

PT-2026-116015

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

CVE-2026-111616: Authorization Bypass Through User-Controlled Key

Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to...

Oqtane Framework Authorization Vulnerability

The Oqtane Framework versions 10.2.6 and earlier have an authorization vulnerability. This vulnerability stems from a permission bypass issue in the SettingController. Attackers can use their alias to request entityId from other sites, thereby reading the stored SMTPPassword and SMTPClientSecret...

CVE-2022-26990

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers...

Command injection

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers...

CVE-2022-26990

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers...