CVE record · 1 source
CVE-2026-129124
CVSS 8.1C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute shell commands by supplying unquoted…
- Vendor
- OpenKermit
- Product
- C-Kermit
- CVSS v3.1
- 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute shell commands by supplying unquoted…
C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute shell commands by supplying unquoted arguments to REMOTE WHO or REMOTE SPACE. Attackers can append shell metacharacters…