https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 19:59:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-62228 EUVD-2026-62228 https://cve.radiocsirt.org/vuln/euvd-2026-62228 https://cve.radiocsirt.org/vuln/fkie_cve-2018-5265 <p>Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the &#39;alias&#39; or &#39;ips&#39; parameter for shell metacharacters.</p> <p>Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the &#39;alias&#39; or &#39;ips&#39; parameter for shell metacharacters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-5265 https://cve.radiocsirt.org/vuln/ghsa-9vc8-2mjv-r265 <p>Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the &#39;alias&#39; or &#39;ips&#39; parameter for shell metacharacters.</p> <p>Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the &#39;alias&#39; or &#39;ips&#39; parameter for shell metacharacters.</p> https://cve.radiocsirt.org/vuln/ghsa-9vc8-2mjv-r265 https://cve.radiocsirt.org/vuln/gsd-2018-5265 gsd-2018-5265 https://cve.radiocsirt.org/vuln/gsd-2018-5265