CVE ID :CVE-2026-101947 Published : Oct. 10, 2026, 3:06 a.m. | 23 minutes ago Description :ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-101947 - ExifTool for photo and video 5.0.1 - Local OS command injection through filenames during CSV export

VERWANDTEARTIKEL

CVE-2026-108474 - JetBrains Exposed SQL Injection

CVE-2026-108267 - Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

CVE-2026-108268 - enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

CVE-2026-108269 - ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

CVE-2026-22061 - CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

CVE-2026-108265 - enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session