Critical severity9.8NVD Advisory· Published May 19, 2026· Updated May 20, 2026

CVE-2026-37281

Description

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hitarth Gg/Zenshinreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.7.0

Patches

Vulnerability mechanics

References

gist.github.com/MitruStefan/cf016709252aabbec7f95b7a70e0cfbanvd
github.com/hitarth-gg/zenshin/commit/7d31c6edfbac978f0ad44c66d761bab9dcd2fa27nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000