Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.4A flaw was found in OpenSSH.CVE-2026-110925 · Red Hat · Red Hat Enterprise Linux 10 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatOct 15, 2026
High8.8Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter.CVE-2026-110908 · Netgate · pfSense-pkg-frr · CIRCL Vulnerability Lookup · CVE.org · NIST NVDOct 15, 2026
UnknownPost-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Netwo…CVE-2026-100232 · CVE.org · NIST NVDOct 14, 2026
Medium6.1A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary command…CVE-2026-0320 · CVE.org · NIST NVDOct 14, 2026
Medium6.1A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary…CVE-2026-0313 · CVE.org · NIST NVDOct 14, 2026
Medium6.5WeGIA is a web manager for charitable institutions.CVE-2026-55679 · LabRedesCefetRJ · WeGIA · CVE.org · NIST NVDOct 14, 2026
High8.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.CVE-2026-54525 · CVE.org · NIST NVDOct 14, 2026
Critical9.3A vulnerability was determined in D-Link DIR-868L 2.01b05.CVE-2026-110536 · CVE.org · NIST NVDOct 14, 2026
High8.5An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.CVE-2026-102079 · CVE.org · NIST NVDOct 14, 2026
High8.7An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos O…CVE-2026-102059 · CVE.org · NIST NVDOct 14, 2026
Critical9.3An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root p…CVE-2026-102031 · CVE.org · NIST NVDOct 14, 2026
High8.7An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacke…CVE-2026-101978 · CVE.org · NIST NVDOct 14, 2026
Critical9.3An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the manag…CVE-2026-101967 · CVE.org · NIST NVDOct 14, 2026
High7.8mise manages dev tools like node, python, cmake, and terraform.CVE-2026-103929 · CVE.org · NIST NVDOct 14, 2026
Critical9.3The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying…CVE-2026-110650 · CVE.org · NIST NVDOct 14, 2026
Critical9.3Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths.CVE-2026-110649 · CVE.org · NIST NVDOct 14, 2026
High8.5@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names.CVE-2026-110648 · CVE.org · NIST NVDOct 14, 2026
High8.5Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names.CVE-2026-110647 · CVE.org · NIST NVDOct 14, 2026
Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.CVE-2026-110646 · CVE.org · NIST NVDOct 14, 2026
Critical9.3Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted…CVE-2026-110645 · CVE.org · NIST NVDOct 14, 2026
Critical9.3nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths.CVE-2026-110644 · CVE.org · NIST NVDOct 14, 2026
Critical9.3transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeAudio().CVE-2026-110643 · CVE.org · NIST NVDOct 14, 2026
High8.5xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file…CVE-2026-110642 · CVE.org · NIST NVDOct 14, 2026
High8.7@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file…CVE-2026-110641 · CVE.org · NIST NVDOct 14, 2026
Critical9.3Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.lan…CVE-2026-110640 · CVE.org · NIST NVDOct 14, 2026