PT-2026-71665

🗓️ 24 Jul 2026 00:00:00Reported by Positive TechnologiesType

Oh My Posh before 29.35.1 allows template injection in setStyle() leading to arbitrary command execution when rendering prompts in attacker-controlled directories.

Reporter	Title	Published	Views	Family All 1000
GithubExploit	Exploit for CVE-2026-54523	31 Oct 202611:04	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Rclone	28 Jun 202611:58	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	13 Oct 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	8 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/mod bundled with IBM Fusion and IBM Fusion HCI	2 Oct 202618:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.	12 Oct 202622:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities	5 Oct 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability jackson-databind, golang.org/x/mod, image-size, bcprov-jdk18on, bcpkix-jdk18on, pyasn, setuptools, Mako, paramiko, http2-common Oct 2026v1	6 Oct 202615:07	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Golang affects IBM Robotic Process Automation for Cloud Pak	9 Oct 202613:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	21 Oct 202618:42	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-6046
suse	www.suse.com/security/cve/CVE-2026-71556
suse	www.suse.com/security/cve/CVE-2026-56865
suse	www.suse.com/security/cve/CVE-2026-53475
suse	www.suse.com/security/cve/CVE-2026-34179
suse	www.suse.com/security/cve/CVE-2026-71311
suse	www.suse.com/security/cve/CVE-2026-71312
suse	www.suse.com/security/cve/CVE-2026-6739
suse	www.suse.com/security/cve/CVE-2026-62323
suse	www.suse.com/security/cve/CVE-2026-49980

04 Sep 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8 - 10

CVSS 49.2

CVSS 24.6

CVSS 35

EPSS0.08585

SSVC

Oh My Posh template injection command execution path segment setStyle function prompt renderer