CVE-2026-112350

Sunhillo SureLine Path Traversal via radarUpdater.cgi

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers can use directory traversal sequences to access sensitive files such as /etc/shadow, the web user database, the root SSH private key, and the device's TLS private key, leading to full system compromise.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Sunhillo

Products

Sureline

CVE-2026-112351

Sunhillo SureLine OS Command Injection via networkDiag.cgi

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ipAddr or dnsAddr parameters. Attackers can bypass the incomplete character denylist from the prior CVE-2021-36380 fix using URL-encoded newline (%0a) or ampersand (%26) sequences that act as command separators after decoding in the ping, nslookup, or traceroute diagnostic modes, leading to full system compromise.

CVSS 4.0 · 8.7 High EPSS 2.7% KEV · Not listed

Vendors

Sunhillo

Products

Sureline

CVE-2026-112352

Sunhillo SureLine Authentication Bypass via Session Cookie

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

CVSS 4.0 · 9.1 Critical EPSS 1.5% KEV · Not listed

Vendors

Sunhillo

Products

Sureline

CVE-2026-65373

Privilege Escalation via Permission Issue in macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Macos

CVE-2026-91909

Command Execution via Argument Injection in Dell OpenManage Enterprise

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Command execution.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Openmanage Enterprise

CVE-2026-91908

Improper Verification of Cryptographic Signature in Dell OpenManage Enterprise Enables Code Execution

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Openmanage Enterprise

CVE-2026-91905

Improper Cryptographic Signature Verification Allowing Filesystem Access

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Openmanage Enterprise

CVE-2026-91900

Improper Authorization in Alienware Command Center Custom URL Scheme Allows Remote Execution

Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-91898

Improper Verification of Cryptographic Signature in Dell Alienware Command Center Allowing Arbitrary Code Execution

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-91897

Improper Certificate Validation in Dell Alienware Command Center 6.x Enables Local Arbitrary Code Execution

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-91894

Least Privilege Violation Allowing Local Privilege Escalation and Code Execution in Dell Alienware Command Center

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-91893

Improper Privilege Management Allowing Local Privilege Escalation in Alienware Command Center

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-77819

Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Langflow

Products

Langflow Oss Langflow

CVE-2026-77691

Command injection vulnerability

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed

Vendors

Zohocorp

Products

Manageengine Key Manager Plus

CVE-2026-119140

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic the host via thread.yield in start functions. Attackers can supply a component whose start function calls an async-lowered import then thread.yield, causing an undisposed fiber drop that crashes embedders.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Bytecodealliance

Products

Wasmtime

CVE-2026-119136

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called asynchronously can trigger runtime panics or unsound cross-thread movement of !Send host variables.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Bytecodealliance

Products

Wasmtime

CVE-2026-119132

Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter

Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Bytecodealliance

Products

Wasmtime

CVE-2026-119128

ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and browser fingerprint to set a password, register a passkey, or link an identity provider, taking over the account.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Zitadel

Products

Zitadel

CVE-2026-119124

ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2026-119120

Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which HuggingFace model the server loads. Attackers can reference a malicious repository with a pickle weight file to execute Python code under PyTorch below 2.6, or exhaust disk and memory.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Unclecode

Products

Crawl4ai