https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T09:15:22.984340+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118869 fkie_cve-2026-118869 2026-11-06T09:15:23.012260+00:00

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

 https://db.gcve.eu/vuln/ghsa-pf5w-w956-56pv GHSA-pf5w-w956-56pv 2026-11-06T09:15:23.012322+00:00

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

 https://db.gcve.eu/vuln/jvndb-2026-000167 jvndb-2026-000167 2026-11-06T09:15:23.012343+00:00

SHIRASAGI provided by SHIRASAGI Project contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><ul><li>Cross-site Scripting (CWE-79) - CVE-2026-117679</li><li>OS Command Injection (CWE-78) - CVE-2026-118869</li></ul>Yuto Sato of Department of Industrial and Systems Engineering, Faculty of Science and Technology, Tokyo University of Science reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.