Aggregator

CVE-2026-120240 | WAVLINK WN553X1-B V260403_2.0.0 WireGuard CLI Group /bin/ioos sub_41A748 group_id/group_name os command injection

VulDB Recent Entries
1 day 18 hours ago
A vulnerability categorized as very critical has been discovered in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. This vulnerability appears as CVE-2026-120240. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure.
vuldb.com

CVE-2026-120239 | WAVLINK WN553X1-B V260403_2.0.0 WireGuard CLI /bin/ioos sub_419DA8 file_id os command injection

VulDB Recent Entries
1 day 18 hours ago
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. It has been rated as very critical. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. This vulnerability is reported as CVE-2026-120239. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure.
vuldb.com

CVE-2026-120238 | WAVLINK WN553X1-B 260403_2.0.0 ovpn_file /bin/ioos sub_4162A8 file_id os command injection

VulDB Recent Entries
1 day 18 hours ago
A vulnerability was found in WAVLINK WN553X1-B 260403_2.0.0. It has been declared as very critical. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. This vulnerability is documented as CVE-2026-120238. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure.
vuldb.com

CVE-2026-120237 | ag-ui-protocol ag-ui up to 0.0.58 Interrupt expiry index.ts isInterruptExpired resource consumption (Issue 2525)

VulDB Recent Entries
1 day 18 hours ago
A vulnerability was found in ag-ui-protocol ag-ui up to 0.0.58. It has been classified as problematic. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/index.ts of the component Interrupt expiry. This manipulation causes resource consumption. This vulnerability is registered as CVE-2026-120237. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The pull request to fix this issue awaits acceptance.
vuldb.com

CVE-2026-120236 | ag-ui-protocol ag-ui up to 0.0.58 Transport Decoder input validation (Issue 2524)

VulDB Recent Entries
1 day 18 hours ago
A vulnerability was found in ag-ui-protocol ag-ui up to 0.0.58 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. This vulnerability is cataloged as CVE-2026-120236. The attack may be launched remotely. Furthermore, there is an exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-120235 | ag-ui-protocol ag-ui up to 0.0.58 SSE Parser sse.ts parseSSEStream resource consumption (Issue 2522)

VulDB Recent Entries
1 day 18 hours ago
A vulnerability has been found in ag-ui-protocol ag-ui up to 0.0.58 and classified as problematic. Affected is the function parseSSEStream of the file sdks/typescript/packages/client/src/transform/sse.ts of the component SSE Parser. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2026-120235. The attack may be initiated remotely. In addition, an exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-120234 | ag-ui-protocol ag-ui up to 0.0.58 HTTP Transport e.text resource consumption (Issue 2521)

VulDB Recent Entries
1 day 18 hours ago
A vulnerability, which was classified as problematic, was found in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component HTTP Transport. Executing a manipulation can lead to resource consumption. This vulnerability is tracked as CVE-2026-120234. The attack can be launched remotely. Moreover, an exploit is present. The pull request to fix this issue awaits acceptance.
vuldb.com

CVE-2026-120233 | ag-ui-protocol ag-ui up to 0.0.58 HttpAgent http.ts information disclosure (Issue 2520)

VulDB Recent Entries
1 day 18 hours ago
A vulnerability, which was classified as problematic, has been found in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file sdks/typescript/packages/client/src/agent/http.ts of the component HttpAgent. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-120233. The attack can be initiated remotely. Additionally, an exploit exists. The pull request to fix this issue awaits acceptance.
vuldb.com

CVE-2026-120232 | Horizon DataSys Reboot Restore Standard up to 13.2 Kernel Driver shield.sys sub_23908 memory corruption

VulDB Recent Entries
1 day 19 hours ago
A vulnerability classified as very critical was found in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2026-120232. The attack can only be performed from a local environment. Furthermore, an exploit is available. A fix is planned for the upcoming release.
vuldb.com

Managed ad