Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.May 12, 2026
- High8.2Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability.May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…EPSS 0.7%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…EPSS 0.5%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…May 12, 2026
- High8.5A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.May 12, 2026
- High8.5A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context o…May 12, 2026
- High8.1Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptF…May 11, 2026
- High8.7OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export.May 11, 2026
- Medium6.5GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method.May 11, 2026
- High8.0A flaw was found in Cockpit.May 11, 2026
- Medium5.1A weakness has been identified in D-Link DNS-320 2.06B01.May 11, 2026
- Low2.0A security flaw has been discovered in D-Link DNS-320 2.06B01.May 11, 2026
- Low2.0A vulnerability was identified in D-Link DNS-320 2.06B01.May 11, 2026
- Low2.0A security vulnerability has been detected in Tenda AC6 15.03.06.23.May 11, 2026
- Low2.1A weakness has been identified in Tenda AC6 15.03.06.23.May 11, 2026
- Low2.0A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01.May 11, 2026
- Low2.0A vulnerability has been found in Tenda AC6 2.0/15.03.06.23.May 11, 2026
- Low2.0A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0.May 10, 2026
- Low2.1A flaw has been found in Wavlink NU516U1 240425.May 10, 2026
- Low2.1A vulnerability was detected in Wavlink NU516U1 240425.May 10, 2026
- Low2.1A security vulnerability has been detected in Wavlink NU516U1 240425.May 10, 2026
- Low2.1A weakness has been identified in Wavlink NU516U1 240425.May 10, 2026
- Low2.1A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03.May 10, 2026
- Low2.1A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425.May 9, 2026