Read the docs

tclahr

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

tclahr records in CISA KEV

No tclahr vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-30040 CVE-2026-41451 · GHSA-3v7p-hjjf-gqp8

UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are subs…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.01171 Published 2026-08-21 Fixed in 3.3.0 CWE-78
TI-2026-30039 CVE-2026-41450 · GHSA-2p5p-hghg-98jw

UAC < 3.3.0 Command Injection via command_collector.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings vi…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0114 Published 2026-08-21 Fixed in 3.3.0 CWE-78
TI-2026-30038 CVE-2026-41449 · GHSA-wcqh-23xq-vm77

UAC < 3.3.0 Command Injection via run_command.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters int…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.01033 Published 2026-08-21 Fixed in 3.3.0 CWE-78
TI-2026-28875 CVE-2026-40032 · GHSA-vv2j-m83f-q33j

UAC < 3.3.0-rc1 Command Injection via Placeholder Substitution

Priority MEDIUM 40

UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the _run_command() function passes constructed command…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00739 Published 2026-04-08 Fixed in 3.3.0-rc1 CWE-78
Open these records in search →