Skip to content
Threat Feed
Subscribe

Tag

Gpsd

1 brief RSS
high advisory

GPSD Code Injection Vulnerability in gpsprof (CVE-2026-60122)

A high-severity code injection vulnerability, CVE-2026-60122, exists in the gpsprof utility of gpsd through version 3.27.5, allowing an attacker to achieve arbitrary OS command execution by injecting malicious content into GPS input data processed by gnuplot.

gpsd code-injection command-injection gnuplot linux macos privilege-escalation
1r 1t 1c