Логотип exploitDog
bind:CVE-2026-24126
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-24126

Количество 3

Количество 3

nvd логотип

CVE-2026-24126

около 1 месяца назад

Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input while adding the SSH host key, which could lead to an argument injection to `ssh-add`. Version 5.16.0 fixes the issue. As a workaround, properly limit access to the management console.

CVSS3: 6.6
EPSS: Низкий
debian логотип

CVE-2026-24126

около 1 месяца назад

Weblate is a web based localization tool. Prior to 5.16.0, the SSH man ...

CVSS3: 6.6
EPSS: Низкий
github логотип

GHSA-33fm-6gp7-4p47

около 1 месяца назад

Weblate has an argument injection in management console

CVSS3: 6.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-24126

Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input while adding the SSH host key, which could lead to an argument injection to `ssh-add`. Version 5.16.0 fixes the issue. As a workaround, properly limit access to the management console.

CVSS3: 6.6
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-24126

Weblate is a web based localization tool. Prior to 5.16.0, the SSH man ...

CVSS3: 6.6
0%
Низкий
около 1 месяца назад
github логотип
GHSA-33fm-6gp7-4p47

Weblate has an argument injection in management console

CVSS3: 6.6
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу