Threats Tagged 'cve-2026-73506'
View all threats tagged with 'cve-2026-73506'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-73506'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-73506 is a vulnerability in JanDeDobbeleer's oh-my-posh prompt renderer prior to version 29.35.1. It involves improper neutralization of terminal control characters in user-controllable data such as current directory names and Git metadata. This flaw allows injection of terminal escape sequences that can manipulate the terminal display, overwrite the clipboard, spoof prompts, or disrupt terminal operation. The issue is fixed in version 29.35.1. Join the discussion | CVE Database V5 | 08/13/2026, 14:23:02 UTC Added: 08/13/2026, 15:12:13 UTC |
0 Oh My Posh versions prior to 29.35.1 allow terminal escape sequence injection via unsanitized prompt segment data. This occurs because dynamic strings such as directory names and Git commit metadata are rendered into the prompt without neutralizing raw terminal control characters. An attacker controlling these values can inject ANSI/OSC escape sequences that the victim's terminal executes on every prompt render, enabling clipboard hijacking, prompt spoofing, window-title manipulation, and denial of service. Join the discussion | GCVE Database | 07/24/2026, 22:35:52 UTC Added: 07/25/2026, 23:09:13 UTC |
Showing 1 to 2 of 2 results