NewsFortinet PSIRT
Second-Order OS Command Injection via JSON Input on start vnc feature
More on Second-Order
Other advisories
- Not ratedosv:CVE-2026-61529Endatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)
- Not ratedosv:CVE-2026-63152Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter
- Not ratedosv:CVE-2026-104456YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username
- Not ratedosv:CVE-2026-42324Piwigo: Second-Order SQL Injection
- Not ratedosv:CVE-2026-54790InvoicePlane: Second-order SQL injection through the unvalidated custom_field_table field in the Custom Fields module
- Not ratedosv:CVE-2026-53557SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
- CriticalCVE-2026-72811SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle in github.com/siyuan-note/siyuan/kernel
- HighCVE-2026-72807SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel in github.com/siyuan-note/siyuan/kernel
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-141
ID