Critical severity9.8NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026
CVE-2017-16926
CVE-2017-16926
Description
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.
Affected products
1- cpe:2.3:a:ohcount_project:ohcount:3.0.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- bugs.debian.org/882372nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.