CVE-2026-118869: Command Injection

Published Nov 5, 2026

Updated

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

Event History

Nov 5, 2026

CVE Published

via MITRE·08:17 AM

Data Sourced

via MITRE·08:17 AM

DescriptionSeverity

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authenticated with low-level privileges. The attack can be carried out over the network and does not require user interaction.

How difficult is exploitation expected to be?

The vulnerability is rated as low attack complexity. Successful exploitation could allow the attacker to execute arbitrary operating-system commands with high potential impact to confidentiality, integrity, and availability.

CVE-2026-118869: Command Injection

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

How difficult is exploitation expected to be?