#os-command-injection

[ follow ]
#cve-2026-25108 #filezen-vulnerability #cisa-kev-catalog #active-exploitation #react-native #cve-2025-11953
Information security
fromThe Hacker News
2 days ago

CISA Confirms Active Exploitation of FileZen CVE-2026-25108 Vulnerability

CISA added CVE-2026-25108, an OS command injection vulnerability in FileZen, to its Known Exploited Vulnerabilities catalog due to active exploitation evidence.
Information security
fromTheregister
3 weeks ago

Critical React Native Metro dev server bug under attack

A critical CVE-2025-11953 OS command-injection flaw in React Native's Metro dev server enables unauthenticated remote execution and malware delivery on Windows and Linux.
Information security
fromTheregister
3 months ago

Fortinet confirms second 0-day in just four days

FortiWeb OS command injection zero-day CVE-2025-58034 is exploited in the wild; Fortinet released a patch—update FortiWeb devices immediately.
Information security
fromIT Pro
4 months ago

Warning issued over critical flaws spotted in TP-Link routers

Two TP-Link VPN router vulnerabilities allow OS command injection via WireGuard settings and unauthorized root access through residual debug code.
[ Load more ]