https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 00:26:40 +0000 https://db.gcve.eu/vuln/cve-2026-113644 <p><strong>Affected:</strong> Eclipse Foundation Eclipse ioFog</p> <p>In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported releases; `iofog-agent provision` and `iofog-agent cert` on older releases) that run over SSH on a remote agent host and via a local shell. A party who can change that API response can include shell metacharacters and cause the operator&#39;s CLI to run additional commands on the agent host when the operator deploys or attaches an agent. This is fixed in version 3.9.2.</p> <p><strong>Affected:</strong> Eclipse Foundation Eclipse ioFog</p> <p>In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported releases; `iofog-agent provision` and `iofog-agent cert` on older releases) that run over SSH on a remote agent host and via a local shell. A party who can change that API response can include shell metacharacters and cause the operator&#39;s CLI to run additional commands on the agent host when the operator deploys or attaches an agent. This is fixed in version 3.9.2.</p> https://db.gcve.eu/vuln/cve-2026-113644