CVE ID :CVE-2026-110642 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110642 - xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

VERWANDTEARTIKEL

CVE-2026-97205 - NGINX ngx_http_core_module vulnerability

CVE-2026-97629 - NGINX ngx_http_ssl_module vulnerability

CVE-2026-91184 - NGINX Gateway Fabric vulnerability

CVE-2026-93479 - NGINX map directive and regex matching vulnerability

CVE-2026-94197 - NGINX Ingress Controller vulnerability

CVE-2026-15176 - NGINX ngx_http_core_module vulnerability