CVE-2026-23920: Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection
Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23920?
CVE-2026-23920 has a severity rating of high, specifically scoring 7.7 on the CVSS scale.
What is CVE-2026-23920 about?
CVE-2026-23920 describes a vulnerability where regex validation for host and event action scripts can be bypassed, potentially allowing command injection.
Who is affected by CVE-2026-23920?
Authenticated users of systems utilizing vulnerable versions for host and event action script validation are at risk from CVE-2026-23920.
How do I fix CVE-2026-23920?
To resolve CVE-2026-23920, update the affected components to their respective fixed versions as released by the vendor.
What type of attack does CVE-2026-23920 enable?
CVE-2026-23920 enables OS Command Injection attacks by allowing bypass of input validation through injected newlines.