OS Command Injection in Reminiscence by Kanishka-Linux
CVE-2026-50874

8.1HIGH

Key Information:

Vendor

Kanishka-Linux

Status
Reminiscence
Vendor
CVE Published:
15 June 2026

What is CVE-2026-50874?

An OS command injection vulnerability has been identified in the media management component of Reminiscence v0.3.0 from Kanishka-Linux. This flaw allows attackers to execute arbitrary OS commands by providing specially crafted input, potentially compromising the affected system's security and integrity. Users are encouraged to review and mitigate the risks associated with this vulnerability to safeguard their applications.

References

https://gist.github.com/pyuysig/7df16c08213f809592bbc7053...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.