CVE Vulnerability Catalog

Path Traversal vulnerability in Logsign SIEM by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Allows access to files outside the allowed directory. The issue affects versions from 6.4.101 before 6.4.117.

SQL injection vulnerability in enVision software by Iron Mountain Archiving Services Inc. Allows manipulation of SQL queries. The issue affects versions before 260655.

An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell command without proper sanitization. An authenticated attacker with administrative privileges can provide a specially crafted hostname containing shell metacharacters to execute arbitrary commands on the host system with the privileges of the NooBaa process.

The mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorized_keys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected device, resulting in full system compromise. The key cannot be removed without remounting the file system and survives a factory reset. Vendor notes that this functionality was used only for service purposes. This issue was fixed in version 3.0.30.

Authorization bypass through User-Controlled key vulnerability in Enocta Platform by Enocta Educational Technologies Inc. Allows exploitation of trusted identifiers. The issue affects versions through 2026-09-28.

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time. This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to insufficient access control in the HA failover endpoint. This allows destructive PostgreSQL database operations.

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy(). An authenticated federation peer can send a FEDERATION_DOWNSTREAM_CONNECT packet with a crafted class name, causing the broker to load and instantiate arbitrary classes visible to the Artemis module classloader.

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1 affecting the saveUploadedFile function in files.js of the save-uploaded-file Endpoint component. Manipulation of the filePath/fileName argument leads to path traversal.

A vulnerability was determined in dbgate up to 7.3.1 affecting the createLink function in packages/api/src/controllers/archive.js of the Archive Link Creation component. Manipulation of the linkedFolder argument causes path traversal.

The mint library (Elixir) has a resource allocation vulnerability allowing a malicious HTTP/2 server to exhaust client memory and cause denial of service. Affected versions are from 1.1.0 before 1.10.2.

Improper parameter handling in NeuVector allows any authenticated user with namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair to inject OS commands in the privileged enforcer container, leading to complete compromise of the worker node.

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to arbitrary file write via HA Failover Config sync upload, leading to remote code execution.

A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.

A security vulnerability has been detected in refly-ai refly up to 1.1.0 affecting some unknown processing of apps/api/src/modules/config/app.config.ts of the JWT Token Handler component. Manipulation with the input 'test' leads to hard-coded credentials.

Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh (Unix) or cscript (Windows). The caller-supplied javaOpts value is spliced into that string unquoted, allowing shell metacharacters (;, |, `, $(...)) to be interpreted by the shell, leading to arbitrary OS command execution as the Karaf process user.

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution. The vulnerability occurs during the processing of DNS records.

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution. The vulnerability occurs in the context of DNS query resolution.