CVE ID :CVE-2026-48546 Published : June 11, 2026, 6:16 p.m. | 48 minutes ago Description :KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-48546 - KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

VERWANDTEARTIKEL

Oracle mitigates PeopleSoft zero-day exploited in data theft attacks

CVE-2026-45176 - Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation

CVE-2026-45177 - Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism

CVE-2026-48547 - KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

CVE-2026-45178 - Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints

CVE-2026-49261 - MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`