CVE Intelligence

Denisidoro vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Denisidoro products: 1 record(s), with severity, exploitation and fixes.

Navi 1

Exploited only (KEV) →

CVE-2026-101032 High · 7.0 CWE-78 Sep 27, 2026
navi through 2.24.0 OS Command Injection via Cheatsheet Variables
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges.