Lucene search
+L

2 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-23920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Host and event action script input is validated with a regex set by the administrator, but the validation runs in multiline mode. If ^ and $ anchors are used in...

8.8CVSS8.1AI score0.00297EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 6:27 p.m.8 views

CVE-2026-23920 Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection

Host and event action script input is validated with a regex set by the administrator, but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands...

7.7CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder