CVE-2026-20350 Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

EUVD-2026-80886

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative...

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

Security Bulletin: The IBM Platform RTM is affected by an SQL injection vulnerability (CVE-2026-17619)

Summary The IBM Platform RTM takes an input in web interface directly for SQL Query, unvalidated value might allow bad actor to insert malicious code into the SQL Query phase. Vulnerability Details CVEID:CVE-2026-17619 DESCRIPTION: IBM Platform RTM is vulnerable to SQL injection. A remote attacke...

CVE-2026-73176

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73165

Nozomi Networks Labs identified an OS command injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request...

CVE-2026-89207

A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...

CVE-2026-89207

A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...

CVE-2026-89207

CVE-2026-89207 affects the web interfaces of the Siemens WTV676-HB6035 (all versions < V3.94) and WTV776-HB6035 (all versions

PT-2026-93362

Name of the Vulnerable Software and Affected Versions WTV676-HB6035 Web Interface versions prior to V3.94 WTV776-HB6035 Web Interface versions prior to V4.17 Description Devices fail to properly validate input received from backend services. This flaw allows an unauthenticated remote attacker to...

CVE-2026-89207: Improper Validation of Specified Type of Input

A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface...

CVE-2026-76872

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting (XSS) vulnerability in its DHCP static IP and IP ACL management pages. The affected CGI components are dhcp_add_staticip_cgi , dhcp_staticip_show_cgi , ip_acl_set_cgi , and ip_acl_show_cgi . An attacker with low pr...

CVE-2026-76698

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

EUVD-2026-79230

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access...

CVE-2026-76704

HPE EdgeConnect SD-WAN Orchestrator web-based management interface is affected by an authenticated stored XSS vulnerability. An attacker with a valid account can inject malicious script that executes in a victim's browser within the interface context, potentially allowing access to sensitive info...

EUVD-2026-79224

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76698 Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76697

CVE-2026-76697 is an authenticated information disclosure vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways . A remote attacker with low-privilege authentication can retrieve sensitive information that could be leveraged to gain further access to ne...