---
id: CVE-2026-111876
title: alexpasmantier television entry.rs output command injection
summary: >-
  A vulnerability was found in alexpasmantier television up to 0.15.9. Affected
  by this issue is the function Entry::output of the file
  television/channels/entry.rs. Performing a manipulation of the argument raw
  results in command injectio…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-77
  - CWE-74
vendor: alexpasmantier
product: television
affected:
  - television 0.15.0
  - television 0.15.1
  - television 0.15.2
  - television 0.15.3
  - television 0.15.4
  - television 0.15.5
  - television 0.15.6
  - television 0.15.7
  - television 0.15.8
  - television 0.15.9
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T05:45:17.843Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111876'
references:
  - url: 'https://vuldb.com/vuln/421588'
    label: VDB-421588 | alexpasmantier television entry.rs output command injection
  - url: 'https://vuldb.com/vuln/421588/cti'
    label: 'VDB-421588 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-111876'
    label: CVE-2026-111876 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1005368'
    label: >-
      Submit #1005368 | https://github.com/alexpasmantier/ television commit
      9d2925b Command Injection
  - url: 'https://github.com/alexpasmantier/television/issues/1124'
  - url: 'https://github.com/alexpasmantier/television/pull/1125'
  - url: 'https://github.com/alexpasmantier/television/'
tags:
  - cve.org
ingestedAt: '2026-10-18T06:38:27.438Z'
---

## Overview

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".

## Affected

- `television 0.15.0`
- `television 0.15.1`
- `television 0.15.2`
- `television 0.15.3`
- `television 0.15.4`
- `television 0.15.5`
- `television 0.15.6`
- `television 0.15.7`
- `television 0.15.8`
- `television 0.15.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.