CVE ID :CVE-2026-75937 Published : Oct. 2, 2026, 8:33 p.m. | 48 minutes ago Description :A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected...

#Sicherheitslücke #Linux

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)

VERWANDTEARTIKEL

CVE-2026-97644 - Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /emails/test

CVE-2026-92536 - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks

Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks

CVE-2026-105080 - ConvertX Arbitrary Code Execution

CVE-2026-104433 - Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString