Tag: path-injection

Jun 13, 2026

CVE-2026-48097 — PATH Injection Leading to Arbitrary Command Execution in NexTOR IP Changer

High-severity PATH injection vulnerability in NexTOR IP Changer where unsafe executable resolution through the PATH environment variable could allow arbitrary command execution.

Security Research