CVE-2026-5789
Search path without quotes in CivetWeb
Résumé
Search path without quotes in CivetWeb
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path (C:\Program Files\CivetWeb\CivetWeb.exe --), due to the absence of quotes in the service configuration.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2026-5789 civetweb
Références
- advisory github.com
- advisory nvd.nist.gov
- patch incibe.es