CVE-2026-65081

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process classified as CWE-494 (Code Download Without Integrity Check), allowing an attacker to cause execution of untrusted code. A successful exploit may lead to code execution, escalation of privileges, data tampering, infor...

EUVD-2026-66096

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

EUVD-2026-66095

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65098

CVE-2026-65098 affects NVIDIA NemoClaw for Linux (versions 0 through 0.0.4). The vulnerability resides in the remote-access helper workflow , where an attacker can trigger weak authentication (CWE-1390), potentially leading to code execution, information disclosure, and data tampering . NVIDIA as...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a sandbox escape vulnerability that an attacker can exploit over the network with low privileges and no user interaction. A successful exploit may lead to code execution , privilege escalation , data tampering , and information disclosure . The vulnerability ca...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux is affected by a path traversal vulnerability that allows bypassing its L7 REST network policy . An attacker with network access and low privileges can exploit this to achieve information disclosure and data tampering . The CVSS v3.1 base score is 8.5 (HIGH) , w...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

EUVD-2026-66091

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65091

NVIDIA OpenShell (all platforms) is affected by an OS command injection vulnerability exploitable through a malicious gateway. A successful exploit could result in code execution, data tampering, and information disclosure . The vendor-assigned CVSS v3.1 score is 8.8 (High) , reflecting a network...

EUVD-2026-66090

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-70551

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-49845

SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata including statistics updates, truncation targets, and...

CVE-2026-63587

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

EUVD-2026-65329

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-75982 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...

Linux Distros Unpatched Vulnerability : CVE-2026-78682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen and callers nltk.data.load,...

PT-2026-81511

Name of the Vulnerable Software and Affected Versions NVIDIA OpenShell for Linux affected versions not specified Description A flaw in NVIDIA OpenShell for Linux allows an attacker to perform a sandbox escape, which is a process of breaking out of a restricted execution environment to access the...

PT-2026-81509

Name of the Vulnerable Software and Affected Versions NVIDIA OpenShell affected versions not specified Description A flaw exists where a malicious gateway can trigger OS command injection. This could allow an attacker to execute arbitrary code, tamper with data, and disclose sensitive information...