CVE-2026-86035 - Weblate: Mercurial argument injection via repository filenames allows authenticated command execution
CVE ID :CVE-2026-86035 Published : Sept. 29, 2026, 3:17 p.m. | 58 minutes ago Description :Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its Mercurial backend....