Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 397 total.
SQL injection in Metabase via publicly shared field-filter parameter (CVE-2026-72899)
An unauthenticated attacker can inject arbitrary SQL into the Metabase application database through a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. Exploiting only the public lin...
Fixed in x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5
SQL injection via unauthenticated endpoint in Metabase (CVE-2026-72898)
Metabase contains a SQL injection vulnerability in the `/api/session/reset_password` endpoint that can be exploited by a remote, unauthenticated attacker. Successful exploitation allows the attacker to inject arbitrar...
Fixed in x.58.24; x.59.21; x.60.17; x.61.11; x.62.9; x.63.5
Server-Side Request Forgery in IBM Application Gateway Operator (CVE-2026-17617)
IBM Application Gateway Operator is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources (CWE-918). An authenticated remote attacker could exploit this ...
Fixed in 26.07.01
Unauthenticated path traversal in Metacat 2.x (CVE-2026-47754)
Metacat versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal vulnerability in the `archiveEntryName` parameter of the `action=read` endpoint of the legacy 1.x API. `ArchiveHandler...
Fixed in >= 3.0.0
Command injection in D-Link DWR-M961 app.cgi interface (CVE-2026-71956)
The D-Link DWR-M961 (hardware revision C1, firmware 1.1.2_C1_202602110044) contains a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands via the netDig....
Fixed in 1.1.5_C1_202607071108
Buffer overflow in D-Link DWR-M961 app.cgi interface (CVE-2026-71957)
The D-Link DWR-M961 (hardware revision C1, firmware 1.1.2_C1_202602110044) contains a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].n...
Fixed in 1.1.5_C1_202607071108
Buffer overflow in D-Link DWR-M961 quicksetup.cgi interface (CVE-2026-71958)
A buffer overflow vulnerability exists in the quicksetup.cgi web-management interface of D-Link DWR-M961 devices (hardware revision C1, firmware 1.1.2_C1_202602110044). A remote attacker can write overly long strings ...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management CGI (CVE-2026-71955)
D-Link DWR-M961 devices with hardware revision C1 contain a command injection vulnerability in the /boafrm/formWsc web management interface. A remote attacker can inject arbitrary commands through the localPin field, ...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 L2TPv3 configuration interface (CVE-2026-71954)
The D-Link DWR-M961 router (hardware revision C1) contains a command injection vulnerability in the `/boafrm/formL2tpv3ConfigSetup` web management interface. A remote attacker can inject arbitrary malicious commands v...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 NTP configuration interface (CVE-2026-71953)
D-Link DWR-M961 devices (hardware revision C1) contain a command injection vulnerability in the /boafrm/formNtp web management interface. A remote attacker can inject arbitrary malicious commands via the ntpServerIp1 ...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management interface (CVE-2026-71952)
A command injection vulnerability exists in the `/boafrm/formPinManageSetup` interface of D-Link DWR-M961 devices with hardware revision C1. A remote attacker can inject arbitrary malicious commands via the `oldPIn` f...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 formIMEISetup interface (CVE-2026-71951)
D-Link DWR-M961 devices with hardware revision C1 contain a command injection vulnerability in the /boafrm/formIMEISetup web management interface. A remote attacker can inject arbitrary malicious commands into the IME...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management interface (CVE-2026-71950)
A command injection vulnerability exists in the `/boafrm/formSmsManage` interface of D-Link DWR-M961 devices with hardware revision C1. A remote attacker can inject arbitrary malicious commands via the `action_value` ...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management interface (CVE-2026-71949)
D-Link DWR-M961 devices (hardware revision C1) contain a command injection vulnerability in the /boafrm/formUSSDSetup web management interface. A remote attacker can inject arbitrary commands through the ussdValue and...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 traceroute diagnostic interface (CVE-2026-71947)
A command injection vulnerability exists in the `/boafrm/formTracerouteDiagnosticRun` web-management CGI interface of D-Link DWR-M961 devices (hardware revision C1). A remote attacker can inject arbitrary malicious co...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management interface (CVE-2026-71948)
D-Link DWR-M961 devices (hardware revision C1) contain a command injection vulnerability in the `/boafrm/formDebugDiagnosticRun` web management CGI interface. A remote attacker can inject arbitrary malicious commands ...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 web management interface (CVE-2026-71944)
D-Link DWR-M961 devices (hardware revision C1) contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel web management interface. A remote attacker can inject arbitrary commands via the fota_...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 Fibocom FOTA upgrade handler (CVE-2026-71945)
A command injection vulnerability exists in the Fibocom firmware-over-the-air upgrade handler of D-Link DWR-M961 devices (hardware revision C1). A remote attacker can inject arbitrary malicious commands via the `fota_...
Fixed in 1.1.5_C1_202607071108
Command injection in D-Link DWR-M961 ping diagnostic interface (CVE-2026-71946)
A command injection vulnerability exists in the `/boafrm/formPingDiagnosticRun` web management interface of the D-Link DWR-M961 (hardware revision C1). A remote attacker can inject arbitrary malicious commands via the...
Fixed in 1.1.5_C1_202607071108
Unauthenticated CSRF chain leading to RCE in OpenYak desktop backend (CVE-2026-46409)
The OpenYak desktop backend exposes a local HTTP API on 127.0.0.1 without Origin validation, loopback authentication, or Content-Type enforcement, and with a wildcard CORS policy. Any webpage visited while OpenYak is ...
Fixed in 1.1.3