Vulnerabilities
SiteGuard WAF Command Injection CVE-2026-106931 Enables Local Privilege Escalation to Root
Attackers exploit a local command injection flaw in SiteGuard WAF to gain root or SYSTEM privileges on servers running vulnerable versions.
OS command injection
Everything Firewall Chronicle has reported about OS command injection: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
GPT-SoVITS UVR5 Command Injection: Unauthenticated Shell Code in Output Fields Yields CVSS 9.3 RCE
Unauthenticated attackers can execute server commands in GPT-SoVITS by injecting shell code into UVR5 output folder fields, rated CVSS 9.3.
Vulnerabilities
Linksys E1700 IPv6 Command Injection in 1.0.0.4.003 Firmware Lacks Vendor Patch
Firmware 1.0.0.4.003 allows remote attackers to inject OS commands through IPv6 settings. No vendor patch exists for this critical flaw.
Vulnerabilities
TOZED X300 Firmware Has Critical Remote OS Command Injection Flaw
A critical CVE-2026-108576 allows remote attackers to execute arbitrary commands in TOZED X300 devices running firmware versions up to 6.01.3.