https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-18T23:27:52.072185+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-110236 fkie_cve-2026-110236 2026-10-18T23:27:52.122527+00:00

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.

 https://vulnerability.circl.lu/vuln/ghsa-2mwq-hp78-h332 GHSA-2mwq-hp78-h332 2026-10-18T23:27:52.122655+00:00

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-110236 UBUNTU-CVE-2026-110236 2026-10-18T23:27:52.122694+00:00

Affected: Ubuntu:16.04:LTS: dolphin, Ubuntu:18.04:LTS: dolphin, Ubuntu:20.04:LTS: dolphin, Ubuntu:22.04:LTS: dolphin, Ubuntu:24.04:LTS: dolphin, Ubuntu:26.10: dolphin, Ubuntu:26.04:LTS: dolphin

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.