CVE ID :CVE-2026-34117 Published : July 1, 2026, 4:24 p.m. | 2 hours, 48 minutes ago Description :Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec(\"php jobs/text_to_subtitles.php...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-34117 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php

VERWANDTEARTIKEL

CVE-2026-50521 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-58593 - NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local User

CVE-2026-58592 - Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration

CVE-2026-58457 - Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

CVE-2026-49119 - Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()

CVE-2026-49091 - Improper Output Neutralization for Logs in Kibana Leading to Log Injection