VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 13, 2026

CVE-2026-104584

CVE-2026-104584

Description

reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).

Affected products

3
  • Yogeshojha/Renginereferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=2.2.0, current master branch (commit de4199222cca5618f1255930ce78987e47d43a99)
  • Amaljafarzade/CVE 2026 104584llm-fuzzy
    Range: <=2.2.0, current master branch (commit de4199222cca5618f1255930ce78987e47d43a99)

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.