CVE-2026-102904 | Medium | 5.4 | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5… |
CVE-2026-102827 | High | 8.1 | 2026-09-29 | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, t… |
CVE-2026-86035 | High | 8.5 | 2026-09-29 | Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vu… |
CVE-2026-100714 | Critical | 9.1 | 2026-09-26 | Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no… |
CVE-2026-100570 | High | 7.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment varia… |
CVE-2026-100561 | High | 8.0 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a co… |
CVE-2026-100369 | High | 8.4 | 2026-09-25 | CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libraries for invoking command-line programs and wrapping executable processes. `Cl… |
CVE-2026-87900 | | | 2026-09-23 | Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code acros… |
CVE-2026-84724 | Medium | 6.6 | 2026-09-23 | An argument-injection flaw was found in the Ansible Automation Platform automation-controller
system-job subsystem. The system-job template launch endpoint sto… |
CVE-2026-84502 | Critical | 9.9 | 2026-09-23 | A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The Project scm_url field is not validated against values that
begin with a d… |
CVE-2026-75131 | High | 7.8 | 2026-09-23 | NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connec… |
CVE-2026-71465 | Low | 3.1 | 2026-09-23 | RunAdHocCommand.build_args() appends limit as bare
positional (args.append(limit)) instead of using
args.extend(['-l', limit]) like… |
CVE-2026-71464 | Low | 3.1 | 2026-09-23 | LaunchConfigurationBaseSerializer.scm_branch has no
validate_scm_branch() leading-dash check, unlike
Project/JobTemplate/JobLaunch… |
CVE-2026-94588 | Medium | 4.4 | 2026-09-21 | In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-su… |
CVE-2026-28197 | High | 8.8 | 2026-09-18 | An authenticated, low-privileged user with access to the NetBackup Flex
OS management shell could supply a specially crafted input to a
privileged administra… |
CVE-2026-54501 | | | 2026-09-17 | Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance. From 1… |
CVE-2026-93337 | High | 7.8 | 2026-09-17 | NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation p… |
CVE-2026-55061 | | | 2026-09-17 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGET_EDITOR or EDITO… |
CVE-2026-89036 | High | 8.8 | 2026-09-17 | Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute a… |
CVE-2026-86864 | High | 8.8 | 2026-09-17 | pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vector as a bare traili… |
CVE-2026-86862 | Medium | 6.5 | 2026-09-17 | pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pg_restore and psql… |
CVE-2026-76866 | High | 7.2 | 2026-09-15 | Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSset_cgi.c and related ddns_Proc.c compo… |
CVE-2026-76862 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi… |
CVE-2026-54337 | Critical | 9.8 | 2026-09-15 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated at… |
CVE-2026-55887 | | | 2026-09-15 | MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlle… |
CVE-2026-19624 | High | 7.8 | 2026-09-14 | A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a gen… |
CVE-2026-90809 | High | 7.3 | 2026-09-14 | A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/a… |
CVE-2026-90894 | High | 7.8 | 2026-09-14 | Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accept… |
CVE-2023-22632 | Low | 2.7 | 2026-09-14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor. |
CVE-2023-22631 | Low | 2.7 | 2026-09-14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. |
CVE-2026-90467 | Medium | 4.0 | 2026-09-12 | aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT T… |
CVE-2026-89066 | High | 7.8 | 2026-09-11 | Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attack… |
CVE-2026-11765 | Low | 3.3 | 2026-09-11 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Par… |
CVE-2026-0304 | | | 2026-09-10 | A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) acce… |
CVE-2026-8044 | | | 2026-09-09 | CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an at… |
CVE-2026-87818 | Medium | 6.5 | 2026-09-09 | GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operan… |
CVE-2026-87794 | High | 8.4 | 2026-09-09 | bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to t… |
CVE-2026-78635 | Medium | 5.0 | 2026-09-08 | The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scal… |
CVE-2026-71377 | Critical | 9.8 | 2026-09-08 | Command Argument Injection Vulnerability in Cosminexus Component Container.
This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03… |
CVE-2026-84256 | | | 2026-09-07 | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary com… |
CVE-2026-86060 | Critical | 9.8 | 2026-09-05 | RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS… |
CVE-2026-85626 | High | 7.5 | 2026-09-04 | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-… |
CVE-2026-74237 | Medium | 6.5 | 2026-09-04 | GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function con… |
CVE-2026-79685 | Medium | 6.5 | 2026-09-01 | Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gai… |
CVE-2026-55673 | | | 2026-08-28 | PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor… |
CVE-2026-54085 | High | 7.1 | 2026-08-28 | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multip… |
CVE-2026-81529 | High | 7.1 | 2026-08-27 | Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes un… |
CVE-2026-80427 | High | 8.4 | 2026-08-26 | bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied sour… |
CVE-2026-79675 | Critical | 9.8 | 2026-08-25 | NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous J… |
CVE-2026-78637 | High | 7.3 | 2026-08-25 | A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pd… |
CVE-2026-78678 | Medium | 6.5 | 2026-08-25 | GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attacke… |
CVE-2026-78676 | Critical | 9.8 | 2026-08-25 | GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected direc… |
CVE-2026-68766 | High | 7.8 | 2026-08-22 | hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile… |
CVE-2026-62867 | Critical | 9.9 | 2026-08-21 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume… |
CVE-2026-63046 | High | 8.8 | 2026-08-21 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent Installer's ModuleManager executes arb… |
CVE-2026-65770 | Critical | 10.0 | 2026-08-20 | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attack… |
CVE-2026-48711 | High | 7.0 | 2026-08-19 | SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyComman… |
CVE-2026-76220 | High | 8.8 | 2026-08-19 | GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg… |
CVE-2026-76219 | High | 8.1 | 2026-08-19 | GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods th… |
CVE-2026-76218 | High | 7.5 | 2026-08-19 | GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a… |
CVE-2026-76212 | Medium | 5.3 | 2026-08-19 | phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=') in the Search/Da… |
CVE-2026-52817 | | | 2026-08-18 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.s… |
CVE-2026-75912 | High | 7.4 | 2026-08-18 | CodeWhale versions before 0.8.64 contain an argument injection vulnerability in the git_blame tool that allows attackers to read arbitrary files by injecting g… |
CVE-2026-68939 | | | 2026-08-18 | Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-version-file-read accepts shell glob metacharacters in .pyt… |
CVE-2026-53790 | High | 8.1 | 2026-08-13 | rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious i… |
CVE-2026-53783 | High | 8.1 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticat… |
CVE-2026-73624 | High | 8.1 | 2026-08-13 | GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed throug… |
CVE-2026-73621 | Medium | 5.4 | 2026-08-13 | GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without t… |
CVE-2026-16770 | Critical | 9.8 | 2026-08-13 | PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document.
For an HTML string or file source, t… |
CVE-2026-73240 | Critical | 9.8 | 2026-08-12 | Specifically crafted inputs may lead to git argument injection in Apache Allura.
This issue affects Apache Allura: before 1.19.1.
Users are recommended to up… |
CVE-2026-73294 | Critical | 9.9 | 2026-08-12 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository git_url handling passes an attacker-controlled --uploa… |
CVE-2026-72538 | High | 8.8 | 2026-08-11 | An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step… |
CVE-2026-71212 | Medium | 4.4 | 2026-08-05 | xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/scanner.py and downloader.py) by appending the user-provided or sca… |
CVE-2026-17347 | High | 7.5 | 2026-07-31 | The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a per-user encryption key, with… |
CVE-2026-18157 | High | 7.8 | 2026-07-31 | A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in… |
CVE-2026-43698 | High | 7.8 | 2026-07-27 | An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe… |
CVE-2026-16796 | High | 7.3 | 2026-07-23 | Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenti… |
CVE-2026-44210 | Critical | 9.9 | 2026-07-23 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions pr… |
CVE-2026-44189 | High | 7.8 | 2026-07-22 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker t… |
CVE-2026-16493 | High | 7.8 | 2026-07-21 | A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands with… |
CVE-2026-15793 | High | 7.5 | 2026-07-21 | BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious… |
CVE-2026-64624 | High | 7.8 | 2026-07-20 | FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted f… |
CVE-2026-44968 | Medium | 6.3 | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized n… |
CVE-2026-52891 | Critical | 9.9 | 2026-07-15 | Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied filenames into paths later passed to child… |
CVE-2026-49987 | High | 8.8 | 2026-07-15 | Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitShallowClone passes the --remote-branch va… |
CVE-2026-50147 | High | 7.6 | 2026-07-15 | Metabase is an open-source business intelligence and embedded analytics tool. From 1.57.0 until 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4, an attacker who can… |
CVE-2026-45068 | High | 7.5 | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTranspor… |
CVE-2026-61459 | Critical | 9.8 | 2026-07-10 | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows… |
CVE-2026-47829 | High | 7.8 | 2026-07-09 | Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator run… |
CVE-2026-57572 | Critical | 10.0 | 2026-07-06 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, whi… |
CVE-2026-40047 | Critical | 9.1 | 2026-07-06 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling component.
The camel-docling componen… |
CVE-2026-14459 | High | 8.8 | 2026-07-03 | Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute par… |
CVE-2026-12856 | High | 8.8 | 2026-06-29 | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown conte… |
CVE-2026-54088 | | | 2026-06-25 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, the H… |
CVE-2026-50014 | Medium | 6.4 | 2026-06-25 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git fetch without a -- separator or… |
CVE-2026-40079 | Critical | 9.8 | 2026-06-25 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command Injection due to lack of sanitization i… |
CVE-2026-48793 | High | 8.8 | 2026-06-24 | Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument injection vulnerability exists in the subtitle conversion c… |
CVE-2026-54686 | Medium | 4.3 | 2026-06-24 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal… |
CVE-2026-11968 | Medium | 5.5 | 2026-06-24 | Argument Injection in TortoiseGitBlame via Malicious Git History Filenames Leads to Arbitrary File Write in TortoiseGit |
CVE-2026-44790 | High | 8.8 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows… |