CVE-2026-105487 in reNgine
Prediction
by VulDB Data Team • 10/05/2026
A vulnerability was found in <a href="/product/yogeshojha:rengine">yogeshojha reNgine up to 2.2.0</a>. Affected by this vulnerability is the function <code>subdomain_discovery</code> of the file <em>web/reNgine/tasks.py</em> of the component <em>listTargets Endpoint</em>. The manipulation of the argument <em>Name</em> results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.