NewsFortinet PSIRT
arbitrary command execution in fgfmsd daemon
More on arbitrary
Other advisories
- MediumCVE-2026-91980Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project in code.vikunja.io/api
- MediumCVE-2026-91984Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2) in code.vikunja.io/api
- Mediumghsa:GHSA-pcc4-rvhr-2pr8Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
- Not ratedosv:GHSA-pcc4-rvhr-2pr8Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
- Not ratedosv:CVE-2026-112005WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor
- CriticalCVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
- CriticalCVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
- Not ratedosv:CVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
Other news entries
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- Cisco warns of actively exploited Secure Email Gateway flawNewsCSO Online
- Cisco Warns of Exploited Secure Email Gateway VulnerabilityNewsSecurityWeek
- Hackers abuse the Ivanti Connect Secure bug to gain access without accountsNewsCSO Online
- GitLab patches a max-severity regex flaw alongside five high-severity bugsNewsCSO Online
- GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server CodeNewsThe Hacker News
- Arbitrary file write in grpc phQueryMasterNewsFortinet PSIRT
- Multiple Arbitrary File Read/Write via SQL InjectionNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-177
ID