Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-4786US | — | — | ||
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/python/cpython/commit/28b4ad38067bbdad34edfcd03ad2de5f06387e53FIX
- https://github.com/python/cpython/commit/a4d3edf3a6ecfde504d02126410d2a65a859b744FIX
- https://github.com/python/cpython/commit/c5767a72838a8dda9d6dc5d3558075b055c56bcaFIX
- https://github.com/python/cpython/commit/d22922c8a7958353689dc4763dd72da2dea03fffFIX
- https://github.com/python/cpython/commit/d6d68494be70bdbda20f89f83801ba52ec37daa4FIX
- https://github.com/python/cpython/commit/f4654824ae0850ac87227fb270f9057477946769FIX
- https://github.com/python/cpython/issues/148169REPORT
- https://github.com/python/cpython/pull/148170WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan