New that day
- highpatchedexploited Lantronix EDS5000 Code Injection Vulnerability Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges. Added to CISA KEV on 2026-06-23 (federal deadline 2026-06-26).
- highpatchedexploited Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection. Can be chained with CVE-2026-34909, CVE-2026-34908. Added to CISA KEV on 2026-06-23 (federal deadline 2026-06-26).