Severity:
HIGH RISK
(7.5)
OS Command Injection via Unsanitized Filenames (CWE-78) in Manyfold Render Generation
CVE-2026-27635
Published:
Feb 25, 2026
Status:
Received
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Source
NDV
Recent Vulnerabilities
CWE-22
(7.4)
Zip Slip Path Traversal (CWE-22) in Zed Extension Archive Extraction
Arbitrary File Write Outside Sandbox
February 25, 2026
CWE-22;CWE-248
(7.2)
Path Traversal & Unhandled Panic (CWE-22, CWE-248) in Vikunja Backup Restore
Arbitrary File Overwrite and Application Crash with Data Loss
February 25, 2026
