// day
Feb 5, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Feb 5, 2026
React Native Community CLI: React Native Community CLI OS Command Injection Vulnerability
› React Native Community CLI
React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments. Added to CISA KEV on 2026-02-05.
CVE-2025-11953 - highclosedpatchedclosed Feb 5, 2026
SmarterTools SmarterMail: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
› SmarterTools SmarterMail
SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution. Added to CISA KEV on 2026-02-05.
CVE-2026-24423
