CVE ID :CVE-2026-34111 Published : July 1, 2026, 4:20 p.m. | 2 hours, 52 minutes ago Description :Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac_text.php...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-34111 - Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php

VERWANDTEARTIKEL

CVE-2026-50521 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-58593 - NodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local User

CVE-2026-58592 - Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration

CVE-2026-58457 - Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

CVE-2026-49119 - Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()

CVE-2026-49091 - Improper Output Neutralization for Logs in Kibana Leading to Log Injection