CVE-2026-26928

CVE-2026-26928 affects SzafirHost. The vulnerability arises because the application does not verify the hash or the vendor’s digital signature for uploaded DLL/SO/JNILIB/DYLIB files, while JARs are checked. An attacker can supply a malicious dynamic library that is saved in the user’s temp folder...

CVE-2026-26928

creationtimestamp| type| source ---|---|--- 2026-04-02 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-26927/ 2026-04-02 15:21:07+00:00| published-proof-of-concept| Telegram/613aY007LGHyW6rIrja4BsrlzuBvUbPzSCrjge10VR5WoE 2026-04-02 16:45:39+00:00| seen|...