PT-2026-102401

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description A remote command injection issue exists in the /api/ZRnetwork/set passwd endpoint. This occurs when the password1 argument is manipulated, allowing an attacker to execute arbitrary commands on the...

PT-2026-99845

Name of the Vulnerable Software and Affected Versions Apache Karaf affected versions not specified Description The instance-management service InstanceServiceImpl constructs the command line for launching a child Karaf JVM using string concatenation, which is then executed via /bin/sh on Unix or...

Microsoft Azure CLI Code Execution

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 9 : pcp (RHSA-2026:72272)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72272 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

Docker Control System Record-Output Command Execution

The vulnerability of the “record-output” parameter at the final destination /instances/$name/exec of the Docker control system and the Incus virtual machine manager is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK WA300 recvUpgradeNewFw() Arbitrary Command Execution

The vulnerability of the recvUpgradeNewFw function /cgi-bin/cstecgi.cgi in the TOTOLINK WA300 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK X6000R Router Command Execution

The vulnerability of the setLanCfg function /usr/sbin/shttpd of the TOTOLINK X6000R router’s microprogramming system is related to the failure to eliminate special elements used in the operating system’s command for processing the Hostname parameter. Exploiting this vulnerability allows a remote...

Totolink A8000RU Router Command Execution

The vulnerability of the setWiFiBasicCfg function in Totolink A8000RU router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands using a...

OpenVpnClientCfg Function Command Execution

The vulnerability of the setOpenVpnClientCfg function in the Totolink A8000RU router’s microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system command...

Container management system validation mechanism Command Execution

The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager relates to insufficient checking of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

RHEL 10 : pcp (RHSA-2026:72273)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72273 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Exploit for CVE-2026-71963

CVE-2026-71963 — Hermes Agent RCE via a repository-delivered...

CVE-2026-101086

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-101086

Nezha Dashboard versions prior to 2.3.5 are vulnerable to a task type validation bypass. The root cause is a shared protobuf Task.Type namespace between service monitors and privileged operations, which fails to restrict service monitor task types to supported probe types. This allows authenticat...

CVE-2026-101086 Nezha Dashboard before 2.3.5 Task Type Validation Bypass

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

EUVD-2026-88021

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-101086 Nezha Dashboard before 2.3.5 Task Type Validation Bypass

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-101086 Nezha Dashboard before 2.3.5 Task Type Validation Bypass

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...