AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-23920

UNKNOWN · CVSS N/A EPSS 0.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-03-24 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. Exploitation may require the attacker to be authenticated.

CVE
CVE-2026-23920
Severity
UNKNOWN
CVSS
N/A
EPSS
0.25%

Original NVD Description

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.