PT-2026-45449 · Undefined · Undefined

Anch0R · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-10273

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manipulation of the argument commitId results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named cd68d102601320bd319d590b75f7652e66f0685f. It is recommended to apply a patch to fix this issue.

Exploit

Correção

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

CVE-2026-10273

Produtos afetados

Undefined

Referências · 9

• 🔥 https://github.com/php-censor/php-censor/issues/442 · Exploit
• https://github.com/php-censor/php-censor/commit/cd68d102601320bd319d590b75f7652e66f0685f · Correção
• https://github.com/php-censor/php-censor/pull/441 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-10273 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-10273 · Nota
• https://vuldb.com/vuln/367552/cti · Nota
• https://vuldb.com/submit/825315 · Nota
• https://vuldb.com/vuln/367552 · Nota
• https://github.com/php-censor/php-censor · Nota