Description

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.

Remediation

References

CVE-2026-4147

Related Vulnerabilities

WordPress Plugin MailChimp List Subscribe Form Multiple Unspecified Vulnerabilities (1.1)

WordPress Plugin Unyson Information Disclosure (2.7.18)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687)

Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33158)

IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-908 CVE-2026-4147