CVE WATCH / VULNERABILITY DETAIL

CVE-2026-103038

UNKNOWNCVSS 0NVD feed

Published 19 October 2026 · tracked since 20 October 2026

Description

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who ca

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools