https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:26:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-318351 EUVD-2026-318351 https://cve.radiocsirt.org/vuln/euvd-2026-318351 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23759 <p>Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell &#39;ps&#39; command does not perform proper argument sanitization and passes user-supplied parameters into an &#39;sh -c&#39; invocation running as root. An authenticated attacker who can log in to the device can inject shell metacharacters after the &#39;ps&#39; subcommand to execute arbitrary OS commands with root privileges, leading to full compromise of the underlying operating system.</p> <p>Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell &#39;ps&#39; command does not perform proper argument sanitization and passes user-supplied parameters into an &#39;sh -c&#39; invocation running as root. An authenticated attacker who can log in to the device can inject shell metacharacters after the &#39;ps&#39; subcommand to execute arbitrary OS commands with root privileges, leading to full compromise of the underlying operating system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23759 https://cve.radiocsirt.org/vuln/ghsa-rcw4-cmhr-ggx7 <p>Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell &#39;ps&#39; command does not perform proper argument sanitization and passes user-supplied parameters into an &#39;sh -c&#39; invocation running as root. An authenticated attacker who can log in to the device can inject shell metacharacters after the &#39;ps&#39; subcommand to execute arbitrary OS commands with root privileges, leading to full compromise of the underlying operating system.</p> <p>Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell &#39;ps&#39; command does not perform proper argument sanitization and passes user-supplied parameters into an &#39;sh -c&#39; invocation running as root. An authenticated attacker who can log in to the device can inject shell metacharacters after the &#39;ps&#39; subcommand to execute arbitrary OS commands with root privileges, leading to full compromise of the underlying operating system.</p> https://cve.radiocsirt.org/vuln/ghsa-rcw4-cmhr-ggx7