{"id":"CVE-2026-111876","title":"alexpasmantier television entry.rs output command injection","summary":"A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injectio…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-77","CWE-74"],"vendor":"alexpasmantier","product":"television","affected":["television 0.15.0","television 0.15.1","television 0.15.2","television 0.15.3","television 0.15.4","television 0.15.5","television 0.15.6","television 0.15.7","television 0.15.8","television 0.15.9"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T05:45:17.843Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111876","references":[{"url":"https://vuldb.com/vuln/421588","label":"VDB-421588 | alexpasmantier television entry.rs output command injection"},{"url":"https://vuldb.com/vuln/421588/cti","label":"VDB-421588 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-111876","label":"CVE-2026-111876 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1005368","label":"Submit #1005368 | https://github.com/alexpasmantier/ television commit 9d2925b Command Injection"},{"url":"https://github.com/alexpasmantier/television/issues/1124"},{"url":"https://github.com/alexpasmantier/television/pull/1125"},{"url":"https://github.com/alexpasmantier/television/"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T06:38:27.438Z","slug":"CVE-2026-111876","body":"## Overview\n\nA vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label \"not planned\".\n\n## Affected\n\n- `television 0.15.0`\n- `television 0.15.1`\n- `television 0.15.2`\n- `television 0.15.3`\n- `television 0.15.4`\n- `television 0.15.5`\n- `television 0.15.6`\n- `television 0.15.7`\n- `television 0.15.8`\n- `television 0.15.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}