CVE-2026-110236 in Dolphin
Сводка
по VulDB • 14.10.2026
KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.