{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/cherrytree-through-1.7.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7,"id":"CVE-2026-118692"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CherryTree (through 1.7.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCherryTree versions through 1.7.2 contain an OS command injection vulnerability in the \u003ccode\u003eCtActions::link_clicked\u003c/code\u003e function. This vulnerability occurs when the non-default \u0026quot;Custom Web Link Clicked Action\u0026quot; option is enabled. Attackers can embed shell metacharacters such as \u003ccode\u003e$(...)\u003c/code\u003e, backticks, or semicolons in web link URLs. When a user clicks such a link, the application passes the unquoted input to \u003ccode\u003estd::system\u003c/code\u003e, resulting in the execution of commands.\u003c/p\u003e\n","date_modified":"2026-10-28T22:48:28Z","date_published":"2026-10-28T22:48:28Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cherrytree-command-injection/","summary":"CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked, allowing command execution via shell metacharacters in web link URLs when the non-default Custom Web Link Clicked Action is enabled.","title":"CherryTree: OS command injection via CtActions (CVE-2026-118692)","url":"https://feed.craftedsignal.io/briefs/2026-10-cherrytree-command-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - CherryTree (Through 1.7.2)","version":"https://jsonfeed.org/version/1.1"}