TI-2026-56974 CVE-2026-82636 · GHSA-ppf9-cgjm-478mOS command injection in Qubes OSPriority MEDIUM 40Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message th…CVSS 3.1HIGH 7.9· Adjacent network · No auth · User interaction · EPSS 0.01922 · Published 2026-08-30 · Fixed in qubes-core-dom0-linux 4.3.22 CWE-78
