Threats Tagged 'cve-2026-58459'
View all threats tagged with 'cve-2026-58459'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-58459'
Click on any threat for detailed analysis and mitigation recommendations
0 A command injection vulnerability (CVE-2026-58459) exists in gpsd, a daemon that provides GPS data access. This flaw allows arbitrary code execution via the GPS device subtype. The issue affects multiple versions of gpsd across various Linux distributions, including Red Hat Enterprise Linux 10. Red Hat has issued an important security advisory with updates to address this vulnerability. Join the discussion | GCVE Database | 07/15/2026, 00:00:00 UTC Added: 07/16/2026, 10:37:17 UTC |
0 gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The subtype field sourced from a DEVICES JSON log entry or NMEA PGRMT sentence is written into a generated gnuplot program via a set title statement with only double-quote characters escaped, enabling arbitrary shell command execution as the user running gnuplot when the victim renders the generated plot through the gpsprof and gnuplot workflow. Join the discussion | CVE Database V5 | 07/09/2026, 16:14:02 UTC Added: 07/09/2026, 16:33:17 UTC |
Showing 1 to 2 of 2 results