← Voltar à pesquisa de CVEs

CVE-2026-26899

luci-app-https-dns-proxy

Descrição

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter

EPSS 0.178%Risco 0
Ver fonte
Publicação
2026-08-27 17:17:48
Versões afetadas
cannotmatch
Tipo
Biblioteca
Última alteração
2026-08-27 17:17:48
Vetor
Pending