Vulnerabilities
TR7 ASP Critical OS Command Injection CVE-2026-16741 Hits All Versions Before 1.0.1554.2331
A severe flaw in TR7 ASP allows attackers to execute system commands via improper input handling, affecting multiple version branches.
OS Command Injection
Everything Vector Bulletin has reported about OS Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Linksys E1700 OS Command Injection CVE-2026-108896 Leaves Routers Vulnerable After Vendor Silence
Public exploit code targets unpatched Linksys E1700 routers, with vendors failing to respond to early vulnerability disclosure notices.
Vulnerabilities
GPT-SoVITS UVR5 OS Command Injection in Output Paths Allows Unauthenticated Server Code Execution
Unauthenticated attackers can execute server commands via output folder paths in the voice cloning tool’s UVR5 component.