Vendor
high
advisory
Multiple Arbitrary Code Execution Vulnerabilities in RPM
2 TTPs 1 CVEMultiple unpatched vulnerabilities in the RPM package manager allow an unauthenticated attacker to achieve arbitrary code execution on systems processing malicious packages.
RPM +1
vulnerability
linux
local-exploitation
2t
1c
updated
high
advisory
Command Injection Vulnerability in rpmuncompress
1 TTP 1 CVEA command injection vulnerability in rpmuncompress allows local attackers to execute arbitrary code by supplying specially crafted archive filenames containing shell metacharacters.
rpmuncompress
vulnerability
command-injection
linux
1t
1c
high
advisory
Command Injection in rpm via Crafted .gem Filenames
1 TTP 1 CVEA local command injection vulnerability (CVE-2026-84233) in the rpm utility allows execution of arbitrary commands when rpmuncompress processes maliciously crafted filenames containing RPM macro syntax.
rpm
1t
1c