CVE-2026-34111: Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmactext.php (line 18) without sanitization: exec(\"php jobs/speechaudiomactext.php \".$loginsession.\" \".$GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34111?
CVE-2026-34111 has a critical severity score of 9.3.
How do I fix CVE-2026-34111?
To fix CVE-2026-34111, sanitize and validate the input for the id parameter before using it in any exec() calls.
What type of vulnerability is CVE-2026-34111?
CVE-2026-34111 is categorized as an OS command injection vulnerability.
Who is affected by CVE-2026-34111?
CVE-2026-34111 affects users of the Guardian Language-System utilizing the speechmac_text.php file.
Can CVE-2026-34111 be exploited remotely?
Yes, CVE-2026-34111 can be exploited remotely by an unauthenticated attacker.