Logo
Retour à la veille

CVE-2026-79535

Publié : 29 septembre 2026
Modifié : 29 septembre 2026
Lien officiel NVD

Description détaillée

mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a caller-supplied value into ~/.voicemode/voicemode.env without shell-safe escaping.

Références et Patchs

https://github.com/mbailey/voicemode/commit/c1cef85333fca497c46a11950911d10123f61e48https://github.com/mbailey/voicemode/releases/tag/v8.10.2https://www.traceforce.ai/security-advisories/cve-2026-79535

Dernières Vulnérabilités

CVE-2026-15278

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

VOIR DÉTAILS

CVE-2026-103047

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.

VOIR DÉTAILS

CVE-2026-103046

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.

VOIR DÉTAILS