https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:35:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-40517 <p><strong>Affected:</strong> radareorg radare2</p> <p>radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser&#39;s print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2&#39;s shell execution operator.</p> <p><strong>Affected:</strong> radareorg radare2</p> <p>radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser&#39;s print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2&#39;s shell execution operator.</p> https://cve.radiocsirt.org/vuln/cve-2026-40517