CVE-2026-51190
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-51190
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spawn() with shell: true. A URL ending in ".git" bypasses the only input check, allowing OS command injection when a user runs "s init" with an attacker-controlled argument.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-51190
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-51190
请登录查看更多情报信息。
Proof of Concept for CVE-2026-51190 (1)
Same Patch Batch · n/a · 2026-08-03 · 20 CVEs total
| CVE-2026-18592 | 4.7 MEDIUM | osCommerce Email Template Configuration EmailController.php EmailController sql injection |
| CVE-2026-18682 | 3.1 LOW | OpenAkita File Upload API upload cross site scripting |
| CVE-2026-67978 | NASA cFS v7.0.1 SBN接口拒绝服务漏洞 | |
| CVE-2026-67673 | OreSat Firmware v1.0 edl函数栈溢出漏洞 | |
| CVE-2026-67975 | NASA cFS v7.0.1越权操作漏洞 | |
| CVE-2026-67974 | NASA cFS v7.0.1 SBN应用DoS漏洞 | |
| CVE-2026-67970 | NASA cFS v7.0.1路径穿越致敏感组件被访问 | |
| CVE-2026-67977 | fprime v4.2.2 Svc::FileDownlink 整数溢出导致DoS | |
| CVE-2026-67973 | NASA cFS v7.0.1 CFDP接收路径拒绝服务漏洞 | |
| CVE-2026-67969 | NASA cFS v7.0.1 HS_MonitorApplications远程代码执行漏洞 | |
| CVE-2026-51775 | Fastadmin 1.6.1 SQL注入漏洞 | |
| CVE-2026-67976 | fprime v4.2.2 Ref::SignalGen DoS漏洞 | |
| CVE-2026-67972 | NASA cFS v7.0.1 CFDP信息泄露漏洞 | |
| CVE-2026-52102 | OpenMediaVault v8.0.4-1 openmediavault-md 命令注入漏洞 | |
| CVE-2026-52521 | Z-BlogPHP 1.7.5 评论功能 SQL 注入漏洞 | |
| CVE-2026-52520 | Emlog<=2.6.14后台发布文章存储型XSS漏洞 | |
| CVE-2026-38446 | osTicket 1.18.3存储型XSS漏洞 | |
| CVE-2026-38444 | osTicket v1.18.3 存储型XSS漏洞 | |
| CVE-2026-38447 | osTicket 1.18.3 API密钥生成存在预测性漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-51190
No comments yet