CVE-2026-13500

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13500", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-06-27T18:27:58.576Z", "datePublished": "2026-06-28T14:15:07.499Z", "dateUpdated": "2026-06-29T12:37:01.600Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-28T14:15:07.499Z"}, "title": "antlr ANTLR4 Grammar Action Block OutputFile.java code injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "Code Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "antlr", "product": "ANTLR4", "versions": [{"version": "4.13.0", "status": "affected"}, {"version": "4.13.1", "status": "affected"}, {"version": "4.13.2", "status": "affected"}], "cpes": ["cpe:2.3:a:antlr:antlr4:*:*:*:*:*:*:*:*"], "modules": ["Grammar Action Block Handler"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-06-27T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-06-27T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-06-27T20:33:12.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "jiazhou (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/374495", "name": "VDB-374495 | antlr ANTLR4 Grammar Action Block OutputFile.java code injection", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/374495/cti", "name": "VDB-374495 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-13500", "name": "CVE-2026-13500 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/838568", "name": "Submit #838568 | antlr ANTLR4 4.13.2 Code Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/wooyun123/wooyun/issues/4", "tags": ["exploit", "issue-tracking"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-29T12:36:50.191025Z", "id": "CVE-2026-13500", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T12:37:01.600Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-13500", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-29T12:36:50.191025Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-29T12:36:56.748Z"}}], "cna": {"title": "antlr ANTLR4 Grammar Action Block OutputFile.java code injection", "credits": [{"lang": "en", "type": "reporter", "value": "jiazhou (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:antlr:antlr4:*:*:*:*:*:*:*:*"], "vendor": "antlr", "modules": ["Grammar Action Block Handler"], "product": "ANTLR4", "versions": [{"status": "affected", "version": "4.13.0"}, {"status": "affected", "version": "4.13.1"}, {"status": "affected", "version": "4.13.2"}]}], "timeline": [{"lang": "en", "time": "2026-06-27T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-06-27T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-06-27T20:33:12.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/374495", "name": "VDB-374495 | antlr ANTLR4 Grammar Action Block OutputFile.java code injection", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/374495/cti", "name": "VDB-374495 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-13500", "name": "CVE-2026-13500 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/838568", "name": "Submit #838568 | antlr ANTLR4 4.13.2 Code Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/wooyun123/wooyun/issues/4", "tags": ["exploit", "issue-tracking"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "Code Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-28T14:15:07.499Z"}}}, "cveMetadata": {"cveId": "CVE-2026-13500", "state": "PUBLISHED", "dateUpdated": "2026-06-29T12:37:01.600Z", "dateReserved": "2026-06-27T18:27:58.576Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-28T14:15:07.499Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:antlr:antlr4:*:*:*:*:*:*:*:*"], "modules": ["Grammar Action Block Handler"], "product": "ANTLR4", "vendor": "antlr", "versions": [{"status": "affected", "version": "4.13.0"}, {"status": "affected", "version": "4.13.1"}, {"status": "affected", "version": "4.13.2"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha identificado una debilidad en antlr ANTLR4 hasta la versi\u00f3n 4.13.2. Afecta a una funci\u00f3n desconocida del archivo tool/src/org/antlr/v4/codegen/model/OutputFile.java del componente Grammar Action Block Gestor. La ejecuci\u00f3n de una manipulaci\u00f3n puede llevar a la inyecci\u00f3n de c\u00f3digo. El ataque puede ser lanzado de forma remota. El exploit ha sido puesto a disposici\u00f3n del p\u00fablico y podr\u00eda ser utilizado para ataques. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-13500", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13500", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-29T12:36:50.191025Z", "version": "2.0.3"}}]}, "published": "2026-06-28T15:16:51.973", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/wooyun123/wooyun/issues/4"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-13500"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/838568"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/374495"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/374495/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-94"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "antlr: ANTLR4: Remote code injection vulnerability", "id": "2493988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493988"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-94", "details": ["A flaw was found in ANTLR4. A remote attacker could exploit a weakness within the Grammar Action Block Handler component by executing a manipulation. This vulnerability allows for code injection, which can lead to the execution of arbitrary code on the affected system."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-13500", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 8"}], "public_date": "2026-06-28T14:15:07Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-13500\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-13500\nhttps://github.com/wooyun123/wooyun/issues/4\nhttps://vuldb.com/cve/CVE-2026-13500\nhttps://vuldb.com/submit/838568\nhttps://vuldb.com/vuln/374495\nhttps://vuldb.com/vuln/374495/cti"], "statement": "This is an Important vulnerability. A remote code injection flaw exists in the ANTLR4 Grammar Action Block Handler, which could allow an unauthenticated attacker to execute arbitrary code. The ability for remote exploitation and the public availability of exploit details elevate the risk, making this a critical concern for Red Hat products that incorporate ANTLR4 and process untrusted input.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.13.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.13.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.13.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "ANTLR4", "source": "cna", "vendor": "antlr"}, "product": "antlr4", "vendor": "antlr"}], "created": "2026-06-28T16:00:07.068946+00:00", "updated": "2026-06-29T20:05:46.557499+00:00", "vendors": ["antlr", "antlr$PRODUCT$antlr4"]}