CVE-2026-79079 | CrossWire Xiphos up to 4.3.2 url.cc/menu_popup.c src/main/url.cc code injection

September 22, 2026 Yanac

A vulnerability marked as problematic has been reported in CrossWire Xiphos up to 4.3.2. This impacts an unknown function of the file src/main/url.cc of the component url.cc/menu_popup.c. This manipulation causes code injection.

This vulnerability is tracked as CVE-2026-79079. The attack is restricted to local execution. No exploit exists.VulDB Recent EntriesRead More