CVE-2026-26030: Microsoft Semantic Kernel Additional Command Injection Vulnerability
Another command injection vulnerability in Microsoft Semantic Kernel related to insecure shell command handling.
Tag: command injection
CVE-2026-25592: Microsoft Semantic Kernel Command Injection Vulnerability
A vulnerability in Microsoft's Semantic Kernel agent framework where model output reaching a shell can lead to command injection. Patched by Microsoft.
GitHub Actions Workflow Injection Vulnerability in Snowflake Repo
A GitHub Actions workflow injection vulnerability allowed crafted issues to execute commands in a CI/CD pipeline. The flaw was fixed by using…
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…
CISA Warns Critical Lantronix EDS5000 Flaw CVE-2025-67038 Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of a critical vulnerability in Lantronix EDS5000…