CVE ID :CVE-2026-121548 Published : Nov. 3, 2026, 4:17 p.m. | 47 minutes ago Description :Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attackers can place files whose names contain a...