Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: tclahr uac 3.3.0 Clear all filters
TI-2026-30040 CVE-2026-41451 · GHSA-3v7p-hjjf-gqp8

UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are subs…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.01171 Published 2026-08-21 Fixed in 3.3.0 CWE-78
TI-2026-30039 CVE-2026-41450 · GHSA-2p5p-hghg-98jw

UAC < 3.3.0 Command Injection via command_collector.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings vi…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0114 Published 2026-08-21 Fixed in 3.3.0 CWE-78
TI-2026-30038 CVE-2026-41449 · GHSA-wcqh-23xq-vm77

UAC < 3.3.0 Command Injection via run_command.sh

Priority MEDIUM 41

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters int…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.01033 Published 2026-08-21 Fixed in 3.3.0 CWE-78