https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:13:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-372770 EUVD-2026-372770 https://cve.radiocsirt.org/vuln/euvd-2026-372770 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85013 <p>A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim&#39;s `MODULEPATH`. When the victim uses Bash completion for `module` or `ml` commands, the malicious module name, containing shell metacharacters, is evaluated as a command. This can lead to arbitrary command execution in the completing user&#39;s shell, impacting their confidentiality, integrity, and availability.</p> <p>A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim&#39;s `MODULEPATH`. When the victim uses Bash completion for `module` or `ml` commands, the malicious module name, containing shell metacharacters, is evaluated as a command. This can lead to arbitrary command execution in the completing user&#39;s shell, impacting their confidentiality, integrity, and availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-85013 https://cve.radiocsirt.org/vuln/rhsa-2026:64766 <p>environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters</p> <p>environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters</p> https://cve.radiocsirt.org/vuln/rhsa-2026:64766 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-85013 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: modules, Ubuntu:18.04:LTS: modules, Ubuntu:20.04:LTS: modules, Ubuntu:22.04:LTS: modules, Ubuntu:24.04:LTS: modules, Ubuntu:26.04:LTS: modules</p> <p>A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim&#39;s `MODULEPATH`. When the victim uses Bash completion for `module` or `ml` commands, the malicious module name, containing shell metacharacters, is evaluated as a command. This can lead to arbitrary command execution in the completing user&#39;s shell, impacting their confidentiality, integrity, and availability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: modules, Ubuntu:18.04:LTS: modules, Ubuntu:20.04:LTS: modules, Ubuntu:22.04:LTS: modules, Ubuntu:24.04:LTS: modules, Ubuntu:26.04:LTS: modules</p> <p>A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim&#39;s `MODULEPATH`. When the victim uses Bash completion for `module` or `ml` commands, the malicious module name, containing shell metacharacters, is evaluated as a command. This can lead to arbitrary command execution in the completing user&#39;s shell, impacting their confidentiality, integrity, and availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-85013