PT-2026-57578 · Pig-Mesh · Pig

Mercy · Published 2026-07-12 · Updated 2026-07-13 · CVE-2026-15512

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file pig-masterpig-visualpig-codegensrcmainjavacompig4cloudpigcodegenserviceimplGeneratorServiceImpl.java of the component pig-codegen. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Code Injection

Special Elements Injection

Weakness Enumeration

CWE-94

CWE-74

Related Identifiers

CVE-2026-15512

Affected Products

Pig

References · 6

• 🔥 https://github.com/sombra0316/CVE-2026/blob/main/pig-mesh/SSIT.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15512 · Security Note
• https://vuldb.com/submit/847500 · Note
• https://vuldb.com/vuln/377841 · Note
• https://vuldb.com/vuln/377841/cti · Note
• https://vuldb.com/cve/CVE-2026-15512 · Note