Log in Start free

Vulnerability · Published Oct 18, 2026 · Assigned by VulDB

CVE-2026-111876alexpasmantier television entry.rs output command injection

Medium 5.3

In plain English

A medium-severity command injection in television from alexpasmantier. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.9%top 39.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".

Affected products (as reported)

VendorProductVersions
alexpasmantier television 0.15.00.15.10.15.20.15.30.15.40.15.50.15.60.15.7

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References