Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2026/05/05 1:48 a.m.2 views

SUSE CVE-2026-7246

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

7.2CVSS5.9AI score0.00029EPSS
Exploits1References3
NVD
NVD
added 2026/04/30 2:16 p.m.1 views

CVE-2026-7246

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

7.2CVSS0.00029EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/04/30 2:16 p.m.1 views

CVE-2026-7246

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

7.2CVSS5.8AI score0.00029EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/30 1:16 p.m.0 views

CVE-2026-7246 Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

5.5AI score0.00029EPSS
Exploits1References2
CVE
CVE
added 2026/04/30 1:16 p.m.11 views

CVE-2026-7246

CVE-2026-7246 affects Pallets Click up to version 8.3.2. The vulnerability is a command injection in the click.edit() function that allows an unprivileged attacker to pass arbitrary OS commands. This is a local attack with high impact on confidentiality, integrity, and availability as per the cit...

7.2CVSS5.5AI score0.00029EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2026/04/30 1:16 p.m.2 views

EUVD-2026-26375

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

7.2CVSS5.5AI score0.00029EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 1:16 p.m.1 views

CVE-2026-7246

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function, allowing attackers to pass arbitrary OS commands from an unprivileged account...

7.2CVSS5.5AI score0.00029EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.1 views

PT-2026-36098

Name of the Vulnerable Software and Affected Versions Pallets Click versions 8.3.2 and earlier Description A command injection issue exists in the click.edit function, which allows an unprivileged account to execute arbitrary operating system commands. Recommendations Update to a version later th...

7.2CVSS6.1AI score0.00029EPSS
Exploits1References10
Rows per page
Query Builder