CVE-2026-103038

A flaw was found in PingTools. The application incorporates arbitrary input from the Host field of a Watcher Internet Control Message Protocol ICMP service directly into a system shell command without adequate sanitization. A local attacker can exploit this vulnerability to execute arbitrary...

CVE-2026-103038

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who...

CVE-2026-103038 PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who...

CVE-2026-103038

PingTools Network Utilities 4.64 Free is vulnerable to an OS command injection (CWE-78) within the Watcher ICMP service . The application accepts arbitrary input in the Host field and improperly incorporates it into a command string executed via sh -c . This flaw allows for unauthorized command e...

EUVD-2026-104454

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who...

Streamsoft PingTools Network Utilities command injection vulnerability

Streamsoft PingTools Network Utilities version 4.64 contains a command injection vulnerability. This vulnerability arises because the Host field in the Watcher ICMP service accepts arbitrary values and appends them to the command string executed via the sh -c command, potentially leading to comma...

PT-2026-117477

Name of the Vulnerable Software and Affected Versions PingTools Network Utilities version 4.64 Description The application contains an OS command injection flaw within the Watcher ICMP service. A local attacker capable of creating or modifying a Watcher service can provide an arbitrary value in t...

CVE-2026-103038: Improper Neutralization of Special Elements used in an OS Command

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who...