CVE-2026-41015

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2026-41015", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-04-16T02:35:46.790Z", "datePublished": "2026-04-16T02:35:47.196Z", "dateUpdated": "2026-04-16T13:15:26.207Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "radare2", "vendor": "radare", "versions": [{"lessThan": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2", "status": "affected", "version": "01ca2f61fa43bd3f4b732447de31b16039d820c0", "versionType": "git"}]}], "descriptions": [{"lang": "en", "value": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-16T02:44:57.723Z"}, "references": [{"url": "https://github.com/radareorg/radare2/issues/25650"}, {"url": "https://github.com/radareorg/radare2/pull/25651"}, {"url": "https://github.com/radareorg/radare2/blob/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2/SECURITY.md?plain=1#L3-L5"}, {"url": "https://github.com/radareorg/radare2/commit/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", "versionStartIncluding": "01ca2f61fa43bd3f4b732447de31b16039d820c0", "versionEndExcluding": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2"}]}]}]}, "adp": [{"references": [{"url": "https://github.com/radareorg/radare2/issues/25650", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-16T13:15:20.609734Z", "id": "CVE-2026-41015", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-16T13:15:26.207Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-41015", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-16T13:15:20.609734Z"}}}], "references": [{"url": "https://github.com/radareorg/radare2/issues/25650", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-16T13:15:10.629Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "radare", "product": "radare2", "versions": [{"status": "affected", "version": "01ca2f61fa43bd3f4b732447de31b16039d820c0", "lessThan": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2", "versionType": "git"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/radareorg/radare2/issues/25650"}, {"url": "https://github.com/radareorg/radare2/pull/25651"}, {"url": "https://github.com/radareorg/radare2/blob/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2/SECURITY.md?plain=1#L3-L5"}, {"url": "https://github.com/radareorg/radare2/commit/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2", "versionStartIncluding": "01ca2f61fa43bd3f4b732447de31b16039d820c0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-16T02:44:57.723Z"}}}, "cveMetadata": {"cveId": "CVE-2026-41015", "state": "PUBLISHED", "dateUpdated": "2026-04-16T13:15:26.207Z", "dateReserved": "2026-04-16T02:35:46.790Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-16T02:35:47.196Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "radare2", "vendor": "radare", "versions": [{"lessThan": "9236f44a28812fe911814e1b3a7bcf1e4de5d3c2", "status": "affected", "version": "01ca2f61fa43bd3f4b732447de31b16039d820c0", "versionType": "git"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3."}, {"lang": "es", "value": "radare2 antes de 9236f44, cuando se configura en UNIX sin SSL, permite la inyecci\u00f3n de comandos a trav\u00e9s de un nombre PDB a rabin2 -PP. NOTA: aunque se supone que los usuarios deben usar la \u00faltima versi\u00f3n de git (no una versi\u00f3n publicada), el rango de fechas para el c\u00f3digo vulnerable fue de menos de una semana, ocurriendo despu\u00e9s de 6.1.2 pero antes de 6.1.3."}], "id": "CVE-2026-41015", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.4, "impactScore": 5.9, "source": "cve@mitre.org", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41015", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-16T13:15:20.609734Z", "version": "2.0.3"}}]}, "published": "2026-04-16T03:16:27.440", "references": [{"source": "cve@mitre.org", "url": "https://github.com/radareorg/radare2/blob/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2/SECURITY.md?plain=1#L3-L5"}, {"source": "cve@mitre.org", "url": "https://github.com/radareorg/radare2/commit/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2"}, {"source": "cve@mitre.org", "url": "https://github.com/radareorg/radare2/issues/25650"}, {"source": "cve@mitre.org", "url": "https://github.com/radareorg/radare2/pull/25651"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/radareorg/radare2/issues/25650"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "cve@mitre.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[01ca2f61fa43bd3f4b732447de31b16039d820c0,9236f44a28812fe911814e1b3a7bcf1e4de5d3c2)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "radare2", "source": "cna", "vendor": "radare"}, "product": "radare2", "vendor": "radare"}], "created": "2026-04-16T03:30:05.961935+00:00", "updated": "2026-06-18T13:30:05.888947+00:00", "vendors": ["radare", "radare$PRODUCT$radare2"]}