Lucene search
+L

2 matches found

CVE
CVE
•added 2026/08/31 2:43 p.m.•43 views

CVE-2026-59111

CVE-2026-59111 is an OS command injection vulnerability in the Digitální a informační agentura (DIA) eObčanka-Identifikace macOS application. Prior to version 3.6.0 , incoming URL parameters were passed to the compiled AppleScript wrapper via concatenation without sufficient sanitization, allowin...

9.3CVSS6AI score0.01306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•6 views

CVE-2026-59111: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

9.3CVSS5.9AI score0.01306EPSS
SaveExploits0References2
Rows per page
Query Builder