cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce Repository Remote Code Execution RCE 📋 Summary Command Injection vulnerability in Composer's Perforce repository driver allowing Remote Code Execution RCE through insufficient input validation in repository URL processing. 🎯 Vulnerability Details Property| Value...

CVE-2026-40176-poc

CVE-2026-40176: PoC de Inyección de Comandos del Sistema Operativo en Composer Perforce English version Resumen Este repositorio es una Prueba de Concepto PoC para la vulnerabilidad crítica de inyección de comandos del sistema operativo CVE-2026-40176 en el controlador VCS de Perforce de Composer...

CVE-2026-40176

CVE-2026-40176 — Composer Perforce Driver Command Injection Proof of Concept A self-contained, OOP-style PHP proof of concept that demonstrates and differentially verifies a command-injection vulnerability in Composer's Perforce repository driver. The PoC runs the same malicious composer.json...

Exploit for CVE-2026-40176

CVE-2026-40176: Composer Perforce OS Command Injection PoC...

Exploit for CVE-2026-40176

!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FO...

PT-2026-32621

Name of the Vulnerable Software and Affected Versions Composer versions 1.0 through 2.2.26 Composer versions 2.3 through 2.9.5 Description A command injection issue exists in the Perforce VCS driver of Composer, a dependency manager for PHP. The Perforce::generateP4Command function constructs she...

PT-2026-32622

Name of the Vulnerable Software and Affected Versions Composer versions 1.0 through 2.2.26 Composer versions 2.3 through 2.9.5 Description Command injection is possible in the PHP dependency manager Composer. The Perforce::syncCodeBase function appends the $sourceReference parameter to a shell...