PT-2026-84499

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

Alibaba Cloud Linux 3 : 0264: freerdp (ALINUX3-SA-2026:0264)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0264 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-64624: FreeRDP before 3.28.0 trea...

openSUSE 16 Security Update : go1.26-openssl (openSUSE-SU-2026:21705-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21705-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...

TencentOS Server 4: vim (TSSA-2026:0871)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0871 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-84510

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

MAL-2026-15820 Malicious code in @systemzero/baileys (npm)

@systemzero/baileys is a fork of the WhatsApp Web library @whiskeysockets/baileys that adds a hidden remote-control channel. lib/Socket/index.js line 4 hardcodes SIGNALSTREAMURL = https://zone.api.br/api/owner/whatsapp-signal-stream, and makeWASocket, the library's socket-creation entrypoint, cal...

VulnCheck KEV: CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

VulnCheck KEV: CVE-2025-60702

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...

PT-2026-84217

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2...

PT-2026-84119

Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704 Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode function of the...

PT-2026-84472

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A denial-of-service issue exists in the command line interface. An authenticated user could exploit this to disrupt the normal operation of the system. Recommendations At the moment, there is ...

PT-2026-84481

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw in a management component allows an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation enables remote command...

PT-2026-84421

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A command injection flaw in the web-based management interface allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host operating...

PT-2026-84493

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A signature verification bypass exists in the command line interface. This issue allows an authenticated actor with administrative privileges to execute arbitrary code on the underlying...

PT-2026-84485

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Authenticated command injection flaws exist in the command line interface. Successful exploitation allows a privileged user to execute arbitrary commands on the underlying operating system...

PT-2026-84484

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Command injection flaws in the API endpoint allow an authenticated remote attacker with administrative privileges to inject and execute arbitrary commands as a privileged user on the underlyin...

PT-2026-84357

Name of the Vulnerable Software and Affected Versions OpenAI Codex Desktop for Windows and macOS affected versions not specified Description The application automatically inspects Git metadata and working-tree status upon opening a workspace. If a workspace contains a repository with a malicious...

PT-2026-84293

A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...

PT-2026-84247

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An OS Command Injection issue exists where an authenticated user with limited privileges can execute arbitrary commands with root privileges. OS Command Injection is a flaw that allow...

PT-2026-84519

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description An OS Command Injection issue exists in the SMA1000 Appliance Management Console AMC. This occurs due to improper neutralization of special elements used in an OS command...