Back to search
CVE-2026-4786
Published: Apr 13, 2026
Modified: Apr 29, 2026
PUBLISHED
Description
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
| Vendor | Product | Versions |
|---|---|---|
Python Software Foundation | CPython | affected 0 - < 3.15.0 |
Weaknesses (CWE)
References
https://github.com/python/cpython/issues/148169
issue-tracking
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now