Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

context-engine

A command injection vulnerability exists in Kirachon context-engine up to version 1.9.0 in the execGitCommand function of the src/mcp/utils/gitUtils.ts file. Manipulating the argument 'args' can lead to command injection. Upgrading to version 1.9.1 mitigates this issue.

CVE-2026-19266 describes a command injection vulnerability in the Kirachon context-engine software, specifically affecting the execGitCommand function within the src/mcp/utils/gitUtils.ts file of the review-git-diff endpoint component. The vulnerability arises from improper handling of the 'args' argument, allowing an attacker with limited privileges to execute arbitrary commands. This issue is resolved by upgrading to version 1.9.1, which includes a patch identified by commit e0729dcfd3a2b1682a7bff86e7174852c03419ba.

Detailed information about A vulnerability was determined in Kirachon context-engine up to 1.9.0. (CVE-2026-19266). Get real-time updates, technical details, an

A vulnerability was determined in Kirachon context-engine up to 1.9.0. (CVE-2026-19266) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-19266: Command Injection in Kirachon context-engine

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.

This vulnerability exists in the Kirachon context-engine component review-git-diff endpoint, specifically in the execGitCommand function of src/mcp/utils/gitUtils.ts. Improper handling of the 'args' parameter allows an attacker with local privileges to inject arbitrary commands. The issue is fixed in version 1.9.1 by patch e0729dcfd3a2b1682a7bff86e7174852c03419ba. The CVSS 4.0 base score is 5.1, indicating a medium severity vulnerability with local attack vector and low privileges required.

Detailed information about CVE-2026-19266: Command Injection in Kirachon context-engine affecting Kirachon context-engine. Get real-time updates, technical deta

CVE-2026-19266: Command Injection in Kirachon context-engine - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2026-19266: Command Injection in Kirachon context-engineCVE-2026-19266 0 A command injection vulnerability exists in Kirachon context-engine up to version 1.9.0 in the execGitCommand function of the src/mcp/utils/gitUtils.ts file. Manipulating the argument 'args' can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. MediumVulnerability#gcve #osv #ghsa-fjwc-rc47-268g Join the discussion	GCVE Database	08/08/2026, 07:15:11 UTC Added: 08/08/2026, 14:51:46 UTC
CVE-2026-19266: Command Injection in Kirachon context-engineCVE-2026-19266 0 A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component. MediumVulnerability#cve #cve-2026-19266 Join the discussion	CVE Database V5	08/08/2026, 07:15:11 UTC Added: 08/08/2026, 07:41:58 UTC

Threats Tagged 'cve-2026-19266'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-19266'

Lead Pen Test Professional