CVE-2026-110236 in Dolphin
Sumário
de MITRE • 13/10/2026
KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.