CVE ID :CVE-2026-108953 Published : Oct. 12, 2026, 1:17 p.m. | 14 minutes ago Description :mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108953 - mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Arguments

VERWANDTEARTIKEL

CVE-2026-92877 - JAXB XML External Entity Injection

CVE-2026-108895 - Linksys E1700 setDMZ os command injection

CVE-2026-108896 - Linksys E1700 setLinksysIpv6 os command injection

CVE-2026-109390 - AnyDesk Heap-Based Buffer Overflow Vulnerability

CVE-2026-109399 - SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates

CVE-2026-109397 - Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space