CyberRota
← Ana sayfaya dön

CVE-2026-67308

CRITICAL · CVSS 10 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-08-01T13:17:00.553 · Çekilme zamanı: 2026-08-01T18:34:53.827379+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

GitHub PoC Linkleri
github.com ↗

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-67308
Severity
CRITICAL
CVSS
10
EPSS
Yok
GitHub

Orijinal NVD Açıklaması

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly interpolated into run steps, enabling command execution and exfiltration of secrets including GITHUB_TOKEN and AWS credentials on self-hosted runners.