CVE Vulnerability Advisory Database

[Affected Scope] Collabora Online Built-in CODE Server (richdocumentscode) for Nextcloud before version 26.4.303.

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands, leading to full system compromise.

[Mitigation] Update the richdocumentscode app to version 26.4.303 or later immediately.

[Affected Scope] All supported versions of Windows OS including Windows 10, 11, and Windows Server.

[Impact] Unauthorized attackers can bypass security features and execute arbitrary commands, leading to full system compromise.

[Mitigation] Apply the latest Microsoft security updates immediately and restrict execution of untrusted URI handlers.

[Affected Scope] AhsayCBS versions up to 9.15.2.69 and 10.3.4.44, specifically the Replication Receiver component

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands by manipulating API arguments, leading to full system compromise

[Mitigation] Immediately upgrade to version 9.15.2.70 or 10.3.4.45 or later

[Affected Scope] Fortinet FortiSandbox (5.0.0 to 5.0.5, 4.4.0 to 4.4.8, 4.2 all versions), FortiSandbox Cloud and PaaS (5.0.4 to 5.0.5)

[Impact] An unauthenticated remote attacker can execute unauthorized OS commands with root privileges via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched versions (5.0.6, 4.4.9 or higher) and restrict external access to the management interface

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.

[Affected Scope] API management interfaces of Progress Kemp LoadMaster load balancer appliances

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted API requests, leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the management API

[Affected Scope] All network-accessible Ubiquiti UniFi OS devices

[Impact] Unauthenticated remote attackers can exploit an Improper Input Validation vulnerability (CWE-20) to execute arbitrary commands with root privileges, potentially recruiting devices into botnets (e.g., Mirai)

[Mitigation] Immediately apply the official vendor security patches and restrict external internet access to the UniFi OS management interface

[Affected Scope] LiteLLM proxy server environments running versions 1.74.2 to before 1.83.7

[Impact] Authenticated users with low-privilege API keys can execute arbitrary OS commands on the proxy host, potentially leading to full system compromise

[Mitigation] Immediately upgrade LiteLLM to the patched version 1.83.7 or later, and restrict access to the vulnerable endpoints in the interim

[Affected Scope] Fortinet FortiSandbox versions 4.4.0 through 4.4.8

[Impact] Unauthenticated remote attackers can execute unauthorized OS commands or code with elevated privileges, potentially leading to full system compromise

[Mitigation] Immediately upgrade to FortiSandbox version 4.4.9 or higher, and restrict access to management interfaces

[Affected Scope] Lantronix EDS5000 device servers running firmware version 2.1.0.0R3

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP RPC requests

[Mitigation] Apply the official firmware patch immediately, and restrict external access to the HTTP/HTTPS management interfaces

[Affected Scope] VMware Aria Operations instances with support-assisted product migration in progress

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands, potentially leading to full system compromise and remote code execution

[Mitigation] Apply official security patches listed in Broadcom VMSA-2026-0001 immediately, or restrict access to migration services

[Affected Scope] Cisco Secure Email Gateway and Cisco Secure Email and Web Manager running Cisco AsyncOS Software with the Spam Quarantine feature enabled

[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the underlying operating system

[Mitigation] Apply official Cisco security patches immediately, or restrict/disable external access to the Spam Quarantine feature as a temporary workaround

[Affected Scope] All Array Networks ArrayOS AG appliances running versions prior to 9.4.5.9

[Impact] High-privileged attackers can execute arbitrary OS commands, leading to complete system compromise and webshell deployment

[Mitigation] Immediately upgrade ArrayOS AG to version 9.4.5.9 or higher and audit system logs for indicators of compromise

[Affected Scope] FreePBX Endpoint Manager and Filestore module versions 17.0.2.36 and above before 17.0.3

[Impact] An authenticated administrator can execute arbitrary OS commands via the SSH connection test function, gaining remote access as the asterisk user

[Mitigation] Immediately upgrade the FreePBX Filestore module to version 17.0.3 or higher

[Affected Scope] Libraesva ESG versions 4.5 through 5.5.x before 5.5.7 (including versions prior to 5.0.31, 5.1.20, 5.2.31, and 5.4.8)

[Impact] Remote attackers can execute arbitrary system commands and compromise the gateway by sending a specially crafted compressed email attachment

[Mitigation] Immediately upgrade to the designated patched versions (5.5.7, 5.4.8, 5.2.31, 5.1.20, or 5.0.31) depending on your active release branch

[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known

[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules

[Affected Scope] License Servlet component of Fortra GoAnywhere MFT

[Impact] Unauthenticated attackers with a validly forged license response signature can deserialize arbitrary objects, potentially leading to remote command injection and full system compromise

[Mitigation] Immediately apply the official security patches provided by Fortra and restrict external access to the license servlet interfaces

[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.

[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.

[Affected Scope] Trend Micro Apex One (on-premise) management console

[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise

[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console

[Affected Scope] Web management interface of Smartbedded Meteobridge weather station devices

[Impact] Adjacent unauthenticated attackers can execute arbitrary system commands with root privileges, leading to full device compromise

[Mitigation] Apply the latest firmware patches immediately and restrict network access to the web administration interface