VulnSea

CWE-78

CVEs classified under CWE-78, newest first.

727 CVEsRSS

CVE-2026-73662None
1mo ago

FreePBX is an open source IP PBX

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration() in Music.class.php. An aut…

▾ SunlitEPSS 0.64%via NVD
CVE-2026-73660None
1mo ago

FreePBX is an open source IP PBX

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, …

▾ SunlitEPSS 0.77%via NVD
CVE-2026-49819Critical· 9.8PoC
1mo ago

UpSnap is a wake on lan web app

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superu…

▾ Abyssalseriousm4x · UpSnapEPSS 1.1%via NVD
CVE-2026-53790High· 8.1
1mo ago

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment …

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment …

▾ TwilightRed Hat · Red Hat Enterprise Linux BaseOS (v. 10)EPSS 0.70%via NVD
CVE-2026-73667High· 8.8
1mo ago

OpenChoreo is a complete, open-source developer platform for Kubernetes

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workf…

▾ Twilightopenchoreo · github.com/openchoreo/openchoreoEPSS 0.86%via NVD
CVE-2026-73570High· 8.9CISA KEVPoC
1mo ago

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP …

▾ Abyssalsynacor · zimbra_collaboration_suiteEPSS 12%via NVD
CVE-2026-73625High· 8.8
1mo ago

gitpython: GitPython: Remote Code Execution via kwarg value smuggling (CVE-2026-73625)

A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to vari…

▾ TwilightRed Hat · Red Hat OpenShift AI 2.25EPSS 0.92%via CSAF
CVE-2026-73623High· 7.5
1mo ago

gitpython: GitPython: Remote Code Execution via malicious Git template (CVE-2026-73623)

A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary co…

▾ TwilightRed Hat · Red Hat OpenShift AI 2.25EPSS 0.83%via CSAF
CVE-2026-49481Critical· 9.6
1mo ago

UpSnap is a wake on lan web app

UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the m…

▾ MidnightEPSS 1.5%via NVD
CVE-2026-63298Critical· 9.9
1mo ago

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidi…

▾ Midnightcanonical · lxdEPSS 0.69%via NVD
CVE-2026-73412None
1mo ago

Shescape is a simple shell escape library for JavaScript

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escap…

▾ SunlitEPSS 0.61%via NVD
CVE-2026-73263Critical· 9.9
1mo ago

Prowler is a cloud security platform

Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_au…

▾ MidnightEPSS 0.65%via NVD
CVE-2026-48554High· 7.5
1mo ago

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_data parameter

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_data parameter. When a notification command references $N…

▾ TwilightEPSS 0.97%via NVD
CVE-2026-48553High· 7.5
1mo ago

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP)

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP). When a custom variable defined on a host, …

▾ TwilightEPSS 0.97%via NVD
CVE-2026-73294Critical· 9.9
1mo ago

Semaphore UI is a web interface for managing DevOps tools

Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository git_url handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/projec…

▾ Midnightsemaphoreui · github.com/semaphoreui/semaphoreEPSS 0.65%via NVD
CVE-2026-13476High· 7.3
1mo ago

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

▾ TwilightEPSS 0.43%via NVD
CVE-2026-73414None
1mo ago

Shescape is a simple shell escape library for JavaScript

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js does not escape `(` and `)` when applications use the escape or escapeAll APIs on Windows with shell set to…

▾ SunlitEPSS 0.89%via NVD
CVE-2026-16856High· 8.8
1mo ago

IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command.

IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command.

▾ Twilightibm · iEPSS 0.50%via NVD
CVE-2026-5917High· 8.8
1mo ago

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supp…

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supp…

▾ TwilightEPSS 1.4%via NVD
CVE-2026-14863High· 8.8
1mo ago

FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command subst…

FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command subst…

▾ TwilightEPSS 2.5%via NVD
CVE-2026-73077High· 8.4
1mo ago

Vim is an open source, command line text editor

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywo…

▾ Twilightvim · vimEPSS 0.14%via NVD
CVE-2026-73076High· 8.4
1mo ago

Vim is an open source, command line text editor

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimb…

▾ Twilightvim · vimEPSS 0.13%via NVD
CVE-2026-73224High· 8.8
1mo ago

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes …

▾ TwilightEPSS 0.67%via NVD
CVE-2026-73081None
1mo ago

Activepieces is an open source AI workflow automation platform

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A…

▾ SunlitEPSS 0.53%via NVD
CVE-2026-72767High· 8.8
1mo ago

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that cau…

▾ Twilightn8n · n8nEPSS 0.88%via NVD
CVE-2026-73222High· 8.8
1mo ago

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permit…

▾ Twilightclaude-code-templates · claude-code-templatesEPSS 0.32%via NVD
CVE-2026-70335High· 7.8
1mo ago

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · visual_studio_codeEPSS 0.46%via NVD
CVE-2026-69320High· 8.8
1mo ago

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · visual_studio_codeEPSS 0.86%via NVD
CVE-2026-11739Medium· 6.4
1mo ago

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiali…

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiali…

▾ Sunlitnetgear · ms90_firmwareEPSS 1.1%via NVD
CVE-2026-72904None
1mo ago

Firecrawl turns entire websites into LLM-ready markdown or structured data

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied…

▾ SunlitEPSS 0.46%via NVD
CWE-78 vulnerabilities (CVEs) — page 12 · VulnSea