Threats tagged 'ghsa-g9hg-38vq-jvh9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.4	CVE-2026-123025os-acme-client · An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of Critical9.42026-11-05GCVE DatabaseCVE-2026-123025 An OS Command Injection vulnerability exists in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through version 4.17. The vulnerability arises because certain user-controlled fields are directly interpolated into shell commands without validation or escaping. A remote authenticated user with privileges to issue or renew certificates via the WebGUI or API can exploit this to execute arbitrary code as root. Report on CVE-2026-123025 Vulnerability CWE-78 #ghsa-g9hg-38vq-jvh9	GCVE Database	2026-11-05

Page 1 of 1