Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.4	EPSS 0.1%	CVE-2026-101947ExifTool for photo and video · OS Command Injection High8.4EPSS 0.1%2026-10-10CVE Database V5CVE-2026-101947 CVE-2026-101947 is a high-severity OS command injection vulnerability in CellHubs ExifTool for photo and video version 5.0.1-gms. The vulnerability arises because the software constructs shell command strings from file paths without properly escaping embedded single quotes, specifically in the CSV-export functionality. This improper neutralization of special elements (CWE-78) allows an attacker to inject arbitrary commands via crafted file paths. The vulnerability requires local access with user interaction and has no known exploits in the wild. EPSS 0.1%Vulnerability CellHubs #cwe-78 #ghsa-fwcv-c88q-m2pm	CVE Database V5	2026-10-10

Showing 1–1 of 1 result