CVE-2026-4786
EUVD-2026-2213413.04.2026, 22:16
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.12.12-3.el10_1.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.12.13-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.14.4-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.14.5-1.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:3.12.9-2.el10_0.9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | 0:2.6.6-70.el6_10.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:2.7.5-94.el7_9.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:3.6.8-21.el7_9.6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.12.13-2.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.11.13-7.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.6.8-76.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:3.6.8-39.el8_4.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:3.6.8-39.el8_4.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:3.6.8-51.el8_8.15 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:3.11.2-2.el8_8.10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:3.6.8-51.el8_8.15 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:3.11.2-2.el8_8.10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.12.12-4.el9_7.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.12.13-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.11.13-5.3.el9_7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.11.13-9.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.9.25-3.el9_7.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.9.25-7.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.14.4-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.14.5-1.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:3.9.10-4.el9_0.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:3.11.2-2.el9_2.12 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:3.9.16-1.el9_2.14 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.11.7-1.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.12.1-4.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.9.18-3.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.11.11-2.el9_6.7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.12.9-1.el9_6.8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.9.21-2.el9_6.6 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325677 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325711 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325710 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-3.1777325680 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325709 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325680 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325708 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.2 | 1780681984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352950 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782353093 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871985 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776872005 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776773390 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871987 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776773505 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776938871 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.13.13-1.1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.11.15-4.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.12.13-3.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.14.4-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777459441 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777454300 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777459504 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798159 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798164 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798165 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798222 ≤ 𝑥 < * | ADP |
| python | cpython | 𝑥 < 3.10.21 | CNA |
| python | cpython | 3.11.0 ≤ 𝑥 < 3.11.16 | CNA |
| python | cpython | 3.12.0 ≤ 𝑥 < 3.12.14 | CNA |
| python | cpython | 3.13.0 ≤ 𝑥 < 3.13.14 | CNA |
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jython |
| ||||||||||||
| pypy3 |
| ||||||||||||
| python2.7 |
| ||||||||||||
| python3.11 |
| ||||||||||||
| python3.13 |
| ||||||||||||
| python3.14 |
| ||||||||||||
| python3.9 |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jython |
| ||||||||||||||||
| pypy3 |
| ||||||||||||||||
| python3.10 |
| ||||||||||||||||
| python3.12 |
| ||||||||||||||||
| python3.13 |
| ||||||||||||||||
| python3.14 |
| ||||||||||||||||
| python2.7 |
| ||||||||||||||||
| python3.11 |
| ||||||||||||||||
| python3.4 |
| ||||||||||||||||
| python3.5 |
| ||||||||||||||||
| python3.6 |
| ||||||||||||||||
| python3.7 |
| ||||||||||||||||
| python3.8 |
| ||||||||||||||||
| python3.9 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpython2_7-1_0 |
| ||||||||||||||||
| libpython2_7-1_0-32bit |
| ||||||||||||||||
| libpython3_10-1_0 |
| ||||||||||||||||
| libpython3_11-1_0 |
| ||||||||||||||||
| libpython3_12-1_0 |
| ||||||||||||||||
| libpython3_13-1_0 |
| ||||||||||||||||
| libpython3_4m1_0 |
| ||||||||||||||||
| libpython3_4m1_0-32bit |
| ||||||||||||||||
| libpython3_6m1_0 |
| ||||||||||||||||
| libpython3_9-1_0 |
| ||||||||||||||||
| python |
| ||||||||||||||||
| python-32bit |
| ||||||||||||||||
| python-base |
| ||||||||||||||||
| python-base-32bit |
| ||||||||||||||||
| python-curses |
| ||||||||||||||||
| python-demo |
| ||||||||||||||||
| python-devel |
| ||||||||||||||||
| python-doc |
| ||||||||||||||||
| python-doc-pdf |
| ||||||||||||||||
| python-gdbm |
| ||||||||||||||||
| python-idle |
| ||||||||||||||||
| python-tk |
| ||||||||||||||||
| python-xml |
| ||||||||||||||||
| python3 |
| ||||||||||||||||
| python3-base |
| ||||||||||||||||
| python3-curses |
| ||||||||||||||||
| python3-dbm |
| ||||||||||||||||
| python3-devel |
| ||||||||||||||||
| python3-idle |
| ||||||||||||||||
| python3-tk |
| ||||||||||||||||
| python3-tools |
| ||||||||||||||||
| python310 |
| ||||||||||||||||
| python310-base |
| ||||||||||||||||
| python310-curses |
| ||||||||||||||||
| python310-dbm |
| ||||||||||||||||
| python310-devel |
| ||||||||||||||||
| python310-idle |
| ||||||||||||||||
| python310-tk |
| ||||||||||||||||
| python310-tools |
| ||||||||||||||||
| python311 |
| ||||||||||||||||
| python311-base |
| ||||||||||||||||
| python311-curses |
| ||||||||||||||||
| python311-dbm |
| ||||||||||||||||
| python311-devel |
| ||||||||||||||||
| python311-doc |
| ||||||||||||||||
| python311-doc-devhelp |
| ||||||||||||||||
| python311-idle |
| ||||||||||||||||
| python311-tk |
| ||||||||||||||||
| python311-tools |
| ||||||||||||||||
| python312 |
| ||||||||||||||||
| python312-base |
| ||||||||||||||||
| python312-curses |
| ||||||||||||||||
| python312-dbm |
| ||||||||||||||||
| python312-devel |
| ||||||||||||||||
| python312-idle |
| ||||||||||||||||
| python312-tk |
| ||||||||||||||||
| python312-tools |
| ||||||||||||||||
| python313 |
| ||||||||||||||||
| python313-base |
| ||||||||||||||||
| python313-curses |
| ||||||||||||||||
| python313-dbm |
| ||||||||||||||||
| python313-devel |
| ||||||||||||||||
| python313-idle |
| ||||||||||||||||
| python313-tk |
| ||||||||||||||||
| python313-tools |
| ||||||||||||||||
| python36 |
| ||||||||||||||||
| python36-base |
| ||||||||||||||||
| python36-curses |
| ||||||||||||||||
| python36-dbm |
| ||||||||||||||||
| python36-devel |
| ||||||||||||||||
| python36-idle |
| ||||||||||||||||
| python36-testsuite |
| ||||||||||||||||
| python36-tk |
| ||||||||||||||||
| python36-tools |
| ||||||||||||||||
| python39 |
| ||||||||||||||||
| python39-base |
| ||||||||||||||||
| python39-curses |
| ||||||||||||||||
| python39-dbm |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| platform-python |
| ||||||||||||||||
| platform-python-debug |
| ||||||||||||||||
| platform-python-devel |
| ||||||||||||||||
| python-unversioned-command |
| ||||||||||||||||
| python3 |
| ||||||||||||||||
| python3-debug |
| ||||||||||||||||
| python3-devel |
| ||||||||||||||||
| python3-idle |
| ||||||||||||||||
| python3-libs |
| ||||||||||||||||
| python3-test |
| ||||||||||||||||
| python3-tkinter |
| ||||||||||||||||
| python3.11 |
| ||||||||||||||||
| python3.11-debug |
| ||||||||||||||||
| python3.11-devel |
| ||||||||||||||||
| python3.11-idle |
| ||||||||||||||||
| python3.11-libs |
| ||||||||||||||||
| python3.11-rpm-macros |
| ||||||||||||||||
| python3.11-test |
| ||||||||||||||||
| python3.11-tkinter |
| ||||||||||||||||
| python3.12 |
| ||||||||||||||||
| python3.12-debug |
| ||||||||||||||||
| python3.12-devel |
| ||||||||||||||||
| python3.12-idle |
| ||||||||||||||||
| python3.12-libs |
| ||||||||||||||||
| python3.12-rpm-macros |
| ||||||||||||||||
| python3.12-test |
| ||||||||||||||||
| python3.12-tkinter |
| ||||||||||||||||
| python3.14 |
| ||||||||||||||||
| python3.14-debug |
| ||||||||||||||||
| python3.14-devel |
| ||||||||||||||||
| python3.14-freethreading |
| ||||||||||||||||
| python3.14-freethreading-debug |
| ||||||||||||||||
| python3.14-freethreading-devel |
| ||||||||||||||||
| python3.14-freethreading-idle |
| ||||||||||||||||
| python3.14-freethreading-libs |
| ||||||||||||||||
| python3.14-freethreading-test |
| ||||||||||||||||
| python3.14-freethreading-tkinter |
| ||||||||||||||||
| python3.14-idle |
| ||||||||||||||||
| python3.14-libs |
| ||||||||||||||||
| python3.14-test |
| ||||||||||||||||
| python3.14-tkinter |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| python |
| ||||
| python-debug |
| ||||
| python-debuginfo |
| ||||
| python-devel |
| ||||
| python-libs |
| ||||
| python-test |
| ||||
| python-tools |
| ||||
| python-unversioned-command |
| ||||
| python3 |
| ||||
| python3-debug |
| ||||
| python3-debuginfo |
| ||||
| python3-devel |
| ||||
| python3-idle |
| ||||
| python3-libs |
| ||||
| python3-test |
| ||||
| python3-tkinter |
| ||||
| python3-tools |
| ||||
| python3.11 |
| ||||
| python3.11-debug |
| ||||
| python3.11-debuginfo |
| ||||
| python3.11-debugsource |
| ||||
| python3.11-devel |
| ||||
| python3.11-idle |
| ||||
| python3.11-libs |
| ||||
| python3.11-test |
| ||||
| python3.11-tkinter |
| ||||
| python3.12 |
| ||||
| python3.12-debug |
| ||||
| python3.12-debuginfo |
| ||||
| python3.12-debugsource |
| ||||
| python3.12-devel |
| ||||
| python3.12-idle |
| ||||
| python3.12-libs |
| ||||
| python3.12-test |
| ||||
| python3.12-tkinter |
| ||||
| python3.13 |
| ||||
| python3.13-debug |
| ||||
| python3.13-debuginfo |
| ||||
| python3.13-debugsource |
| ||||
| python3.13-devel |
| ||||
| python3.13-freethreading |
| ||||
| python3.13-freethreading-debug |
| ||||
| python3.13-idle |
| ||||
| python3.13-libs |
| ||||
| python3.13-test |
| ||||
| python3.13-tkinter |
| ||||
| python3.14 |
| ||||
| python3.14-debug |
| ||||
| python3.14-debuginfo |
| ||||
| python3.14-debugsource |
| ||||
| python3.14-devel |
| ||||
| python3.14-freethreading |
| ||||
| python3.14-freethreading-debug |
| ||||
| python3.14-freethreading-devel |
| ||||
| python3.14-freethreading-idle |
| ||||
| python3.14-freethreading-libs |
| ||||
| python3.14-freethreading-test |
| ||||
| python3.14-freethreading-tkinter |
| ||||
| python3.14-idle |
| ||||
| python3.14-libs |
| ||||
| python3.14-test |
| ||||
| python3.14-tkinter |
| ||||
| python3.9-debuginfo |
| ||||
| python3.9-debugsource |
| ||||
| tkinter |
|
Common Weakness Enumeration
- CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
- CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')The software constructs a string for a command to executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
References