Read the docs

khyrenz

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

khyrenz records in CISA KEV

No khyrenz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Parseusbs 2 records MEDIUM

Records

2 records

TI-2026-28873 CVE-2026-40030 · GHSA-pqxv-pjgq-x85w

parseusbs < 1.9 Command Injection via Volume Path Argument

Priority MEDIUM 40

parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell command with ls, allowing arbitrary command injection vi…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00763 Published 2026-04-08 Fixed in 1.9.0 CWE-78
TI-2026-28872 CVE-2026-40029 · GHSA-2m8h-6748-cf32

parseusbs < 1.9 Command Injection via Crafted LNK Filename

Priority MEDIUM 40

parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allowing arbitrary command execution via crafted .lnk file…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00819 Published 2026-04-08 Fixed in 1.9.0 CWE-78
Open these records in search →