CVEvulnerability

CVE-2026-36365

7.8 HIGH Published 2026-05-04 Modified 2026-06-17 Official page ↗

Status: Awaiting Analysis
Published: 2026-05-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-77, CWE-94

Description

An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep functions in PostCompressionActions.cpp

Weakness · CWE (2)

CWE-77 Improper Neutralization of Special Elements used in a Command weakness
CWE-94 Improper Control of Generation of Code weakness

References

https://github.com/Lymphatus/caesium-image-compressor github.com
https://github.com/Lymphatus/caesium-image-compressor/blob/main/src/utils/PostCompressionActions.cpp github.com
https://github.com/Lymphatus/caesium-image-compressor/pull/376 github.com
https://github.com/mertsatilmaz/vulnerability-research/blob/main/advisories/CVE-2026-36365.md github.com

CVE-2026-36365

Description

Related

Weakness · CWE (2)

References