CPE
high
advisory
Multiple Arbitrary Code Execution Vulnerabilities in RPM
2 TTPs 1 CVEMultiple unpatched vulnerabilities in the RPM package manager allow an unauthenticated attacker to achieve arbitrary code execution on systems processing malicious packages.
RPM +1
vulnerability
linux
local-exploitation
2t
1c
updated
high
advisory
Command Injection in RPM Package Manager
1 TTP 1 CVEA command injection vulnerability (CVE-2026-95521) in the rpm package manager allows arbitrary command execution when processing maliciously crafted source RPM files containing %() macro constructs.
rpm
vulnerability
command-injection
supply-chain
1t
1c
high
advisory
Command Injection in rpm via Crafted .gem Filenames
1 TTP 1 CVEA local command injection vulnerability (CVE-2026-84233) in the rpm utility allows execution of arbitrary commands when rpmuncompress processes maliciously crafted filenames containing RPM macro syntax.
rpm
1t
1c