188799 matches found
CVE-2026-54674
The FreePBX open source IP PBX is vulnerable to authenticated command injection in the User Control Panel (UCP) interface prior to versions 16.0.39 and 17.0.7 . The root cause is insufficient sanitization of specific URL parameters, which allows an authenticated user to execute arbitrary commands...
CVE-2026-86102
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
CVE-2026-87969
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...
CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...
CVE-2026-87969
A WatchGuard AP OS command injection vulnerability exists within the diagnostic CLI . An authenticated administrator can execute arbitrary operating system commands by providing crafted input. While the technical root cause is not detailed beyond the input handling flaw, the impact allows for ful...
CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
EUVD-2026-88364
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
EUVD-2026-88363
An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying crafted input...
CVE-2026-86102
The WatchGuard AP is affected by an OS command injection vulnerability within its internal API service . An attacker with network access to the AP can exploit this flaw to execute arbitrary shell commands on the underlying operating system. The vulnerability is assigned a CRITICAL base severity s...
CVE-2026-82854
A flaw was found in nodemailer. When an application permits untrusted input to set the custom envelope size setting, carriage return and line feed CRLF characters are not properly sanitized before being placed into the Simple Mail Transfer Protocol SMTP command stream. A remote attacker could...
shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
CVE-2026-98143
A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...
Important: Red Hat Security Advisory: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection
A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh...
Important: Red Hat Security Advisory: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection
A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh...
CVE-2026-101076
A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...
CVE-2026-4556
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...