Vulnerabilities
TOZED X300 Firmware Critical RCE Flaw CVE-2026-108576 Unpatched; Vendor Ignored Disclosure Attempts
Unpatched flaws in TOZED X300 firmware allow remote attackers to execute OS commands via the IPPingDiagnostics component.
Command Injection
Everything Packet Tribune has reported about Command Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
OpenSpug Remote Command Injection: Unpatched Critical CVE-2026-108540 Affects Versions 3.0-4.0.1 With No Vendor Fix
Attackers can execute arbitrary OS commands via OpenSpug’s file transfer endpoint, with no patch confirmed by the vendor for affected releases.