CVE-2026-118692 | giuspen CherryTree up to 1.7.2 Custom Web Link Clicked Action CtActions::link_clicked os command injection

October 29, 2026 Yanac

A vulnerability, which was classified as problematic, was found in giuspen CherryTree up to 1.7.2. This issue affects the function CtActions::link_clicked of the component Custom Web Link Clicked Action. Such manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-118692. An attack has to be approached locally. There is no exploit available.VulDB Recent EntriesRead More