CVE-2026-4786

ADVISORY - nist

Summary

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

EPSS Score⁠: 0.00015 (0.030)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-77⁠

Improper Neutralization of Special Elements used in a Command ('Command Injection')

ADVISORY - redhat

CWE-88⁠

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Impacted images

Advisories

Docker

CREATED

4 days ago

UPDATED

3 days ago

ADVISORY ID

CVE-2026-4786

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
python	dhi	-	-	>=0	Not yet available
alpine/python-3.10	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.11	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.12	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.13	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.14	apk	alpine	3.23	>=0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

4 days ago

UPDATED

3 days ago

ADVISORY IDCVE-2026-4786⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-77⁠

CVSS SCORE

7high

Debian

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-4786⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-4786⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Bitnami

CREATED

13 hours ago

UPDATED

12 hours ago

ADVISORY ID

BIT-libpython-2026-4786

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7high

Bitnami

CREATED

13 hours ago

UPDATED

12 hours ago

ADVISORY ID

BIT-python-2026-4786

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7high

Bitnami

CREATED

13 hours ago

UPDATED

12 hours ago

ADVISORY ID

BIT-python-min-2026-4786

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7high

Red Hat

CREATED

4 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-4786⁠

EXPLOITABILITY SCORE

1.3

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-88⁠

CVSS SCORE

7.3high