Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts ...

CVE-2026-52876

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the op

历史摘要 · 未重新核验 · NVD

LibreNMS Vulnerable to Remote Code Execution via AboutController

# Remote Code Execution via AboutController in LibreNMS ## Summary A Remote Code Execution (RCE) vulnerability exists

历史摘要 · 未重新核验 · GitHub Advisory

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses those modules to run externa...

CVE-2026-55426

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfa

历史摘要 · 未重新核验 · NVD

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_c...

CVE-2026-53455

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

MONAI vulnerable to OS command injection

### Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after sub

历史摘要 · 未重新核验 · GitHub Advisory

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.t...

CVE-2026-71551

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.1

历史摘要 · 未重新核验 · NVD

Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values...

CVE-2026-68939

Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-version-file-read ac

历史摘要 · 未重新核验 · NVD

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interf...

CVE-2026-75094

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?

历史摘要 · 未重新核验 · NVD

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker,...

CVE-2026-71472

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrato

历史摘要 · 未重新核验 · GitHub Advisory

An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function

CVE-2026-67965

An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login funct

历史摘要 · 未重新核验 · NVD

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject mali...

CVE-2026-71472

A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrato

历史摘要 · 未重新核验 · NVD

uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set

## Summary The sigstore check on `metadata.json` is gated on the wrong side of the condition. `LoadMetadata` in `intern

历史摘要 · 未重新核验 · GitHub Advisory

Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)

CVE-2026-68519

## Summary In Glances 4.5.5 the `--disable-config-exec` flag was extended (GHSA-3vwc-qwhc-3mj7) to stop `secure_popen()`

历史摘要 · 未重新核验 · GitHub Advisory

Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection

CVE-2026-62982

## Summary CVE-2026-32608 ("Command Injection via Process Names in Action Command Templates") was fixed (commit `5680a5d

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/g...

CVE-2026-19983

CVE-2026-19983 是影响 GL.iNet 多款路由器型号（A1300、AX1800、AXT1800、MT2500、MT3000、MT6000、X3000、XE3000）在 4.8.x 版本中的操作系统命令注入漏洞。该漏洞位于 N

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation...

CVE-2026-19982

CVE-2026-19982 是影响 GL.iNet BE9300 和 MT6000 路由器（固件版本 4.8.x）的一个操作系统命令注入漏洞。漏洞位于防火墙管理 RPC 组件中，攻击者通过构造恶意 dest_port 或 dest_ip

历史摘要 · 未重新核验 · NVD

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE30...

CVE-2026-19981

CVE-2026-19981 是影响 GL.iNet 多款路由器型号（包括 A1300、AX1800、AXT1800、BE1400、BE3600、BE6500、BE9300、BE10000、E5800、MT2500、MT3000、MT360

历史摘要 · 未重新核验 · NVD

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file build/i...

CVE-2026-19978

CVE-2026-19978 是 jiantao88 android-mcp-server 中的一个 OS 命令注入漏洞。该服务器是一个基于 Android 的 MCP（Model Context Protocol）实现，用于与 Andro

历史摘要 · 未重新核验 · NVD

Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

CVE-2026-55157

### Summary `token-optimizer-mcp` is vulnerable to OS command injection in the `smart_user` tool. The `get-user-info`

历史摘要 · 未重新核验 · GitHub Advisory