p PatchFirst

CVE-2026-111876

CVE-2026-111876 · alexpasmantier television entry.rs output command injection

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".

CVSS 4.8 · Medium · EPSS 0.9%

Published
Updated

Affected products and versions

  • television

    Versions
    • 0.15.0: Affected
    • 0.15.1: Affected
    • 0.15.2: Affected
    • 0.15.3: Affected
    • 0.15.4: Affected
    • 0.15.5: Affected
    • 0.15.6: Affected
    • 0.15.7: Affected
    • 0.15.8: Affected
    • 0.15.9: Affected

    No fix published

Original sources

Check your server →