CRITICAL 9.2 NVD

CVE-2026-118462

Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also p

Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.

References

Published: 2026-11-09 · Source: NVD · Feed updated: 2026-11-10

This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-11-09 via NVD.

Risk Timeline

CVE Disclosed2026-11-09 · 0 days ago

Remediation Resources

Official Advisory

www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup

Official Advisory

www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-p

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.