CVE-2026-86035 | WeblateOrg Weblate up to 2026.7 Mercurial Backend injection

September 29, 2026 Yanac

A vulnerability was found in WeblateOrg Weblate up to 2026.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Mercurial Backend. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-86035. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More