CVE-2026-116958

Description

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.

Overview

State: PUBLISHED
Assigner (CNA): redhat
CVSS severity: MEDIUM
CVSS score: 6.7 / 10
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Effective score: 6.7 / 10 MEDIUM source: CNA overview
CWE(s): CWE-78
Reserved: 2026-10-29
Published: 2026-11-02 20:59 UTC
Last updated: 2026-11-02 20:59 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116958.json

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-11-02 21:17:25 UTC
NVD last modified: 2026-11-03 14:17:24 UTC
NVD CVSS v3.1: 6.7 / 10 MEDIUM source: secalert@redhat.com
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore: 0.8 / 10
Impact subscore: 5.9 / 10
EPSS score: 0.0013 (probability of exploitation in next 30 days)
EPSS percentile: 2.66% vs all CVEs — higher = more likely to be exploited, as of 2026-11-03

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-115629
Assigner: redhat
Published: Nov 2, 2026, 8:59:48 PM
Updated: Nov 3, 2026, 1:25:07 PM
EUVD base score (CVSS 3.1): 6.7 / 10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EUVD-reported EPSS: 0.0000
Aliases: GHSA-6cqg-7298-jcjp

ENISA description: A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.

EUVD references (2)

Affected products (1)

Vendor	Product	Versions	Platforms
—	—	`0.2.2` (affected), `0.2.3-rc.0` (affected)	—

Vendor references (2)

References embedded in the original CVE record by the assigning CNA.

https://access.redhat.com/security/cve/CVE-2026-116958 vdb-entryx_refsource_REDHAT
RHBZ#2564198 issue-trackingx_refsource_REDHAT

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

NVD-tagged references (2)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://access.redhat.com/security/cve/CVE-2026-116958 secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2564198 secalert@redhat.com

Remediations (10)

CVE-2026-96958 - Vulnerability Details - OpenCVE

web:app.opencve.io

Remediation No solution or workaround provided in the CVE record. OpenCVE Recommended Actions Apply the latest Microsoft .NET Framework updates that contain the CVE‑2026‑96958 fix directly from the Microsoft Security Response Center.

2026-11-03 12:41 UTC
Security Advisory - Action Required - Active Exploitation of CVE-2026 ...

web:blog.checkpoint.com

CVE - 2026 -93616 is a newly discovered zero-day vulnerability in Security Management, and a fix is available now as part of this advisory. Fixes are available for both vulnerabilities. Customers running affected versions should install the applicable fixes immediately. Affected versions and remediation instructions are detailed below.

2026-11-03 12:41 UTC
September 2026 Critical Security Patch Update Released

web:blogs.oracle.com

For more information about the Critical Security Patch Update program, see the security vulnerability remediation practices page located on the Oracle Trust Center.

2026-11-03 12:41 UTC
Microsoft Security Advisory CVE-2026-96958 - GitHub

web:github.com

Microsoft Security Advisory CVE - 2026 -96958 - .NET and Visual Studio Denial of Service Vulnerability

2026-11-03 12:41 UTC
Cisco Meraki Security Hardening Release: October 2026

web:sec.cloudapps.cisco.com

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching ...

2026-11-03 12:41 UTC
Pre-Authentication Authorization Bypass and Command Injection ...

web:trust.barracuda.com

Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities in Certain Barracuda Products — Updates Available Overview Barracuda has identified two vulnerabilities affecting certain Barracuda products: a pre-authentication authorization bypass vulnerability and a command injection vulnerability. The vulnerabilities have been assigned CVE - 2026 -116606 and CVE - 2026 -111560 ...

2026-11-03 12:41 UTC
What Is CVE Remediation in 2026? - aikido.dev

web:www.aikido.dev

None of these is a clean fix , which is why the decision on how to remediate depends on knowing what package versions are running in production and why. This post will cover how AI has accelerated CVE detection and discovery, the upgrade trap, what CVE remediation actually involves in 2026 , and how to solve the CVE remediation problem.

2026-11-03 12:41 UTC
Oracle Critical Patch Update Advisory - July 2026

web:www.oracle.com

This Critical Patch Update contains 1448 new security patches across the product families listed below. Please note that a My Oracle Support (MOS) note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at July 2026 Critical Patch Update: Executive Summary and Analysis.

2026-11-03 12:41 UTC
Oracle Critical Security Patch Update Advisory - September 2026

web:www.oracle.com

Prior Critical Patch Update and Critical Security Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins for information about Oracle Security advisories.

2026-11-03 12:41 UTC
CVE-2026-96958: Vulnerability Details - Analysis & Fix | TheHackerWire

web:www.thehackerwire.com

How do I fix or mitigate CVE - 2026 -96958? To protect against CVE - 2026 -96958, you should: (1) Apply the latest security patches from the vendor, (2) Check official security advisories for specific remediation steps, (3) Update affected software to the latest version, and (4) Monitor your systems for any signs of exploitation.

2026-11-03 12:41 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-116958.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/konflux-ci/konflux-ci",
          "defaultStatus": "unaffected",
          "packageName": "konflux-ci",
          "versions": [
            {
              "status": "affected",
              "version": "0.2.2"
            },
            {
              "status": "affected",
              "version": "0.2.3-rc.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank EVIL0RD (GitHub: https://github.com/EVIL0RD - warlockdarkarmy@gmail.com) for reporting this issue."
        }
      ],
      "datePublic": "2026-10-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T20:59:48.595Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-116958"
        },
        {
          "name": "RHBZ#2564198",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2564198"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-30T17:20:48.840Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-10-30T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Konflux-ci: unquoted variable expansion in shell command execution",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-78: Improper Neutralization of Special Elements used in an OS Command"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-116958",
    "datePublished": "2026-11-02T20:59:48.595Z",
    "dateReserved": "2026-10-29T22:56:15.437Z",
    "dateUpdated": "2026-11-02T20:59:48.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}