CVE-2026-86427: Php Rrdtool Graph Option Argument Injection
Unescaped dynamic value $VAL is emitted as an rrdtool graph option $FLAG. rrdtool options are space-joined into a single command line/stdin stream, so a double quote in $VAL terminates the option token and a CR/LF starts a new rrdtool command. An attacker controlling this free-form string (e.g. the graph_title request parameter stored in user_title and re-em
PHPgreprules fetch cve-2026-86427-php-rrdtool-graph-option-argument-injection --engine opengrepDescription
Unescaped dynamic value $VAL is emitted as an rrdtool graph option $FLAG. rrdtool options are space-joined into a single command line/stdin stream, so a double quote in $VAL terminates the option token and a CR/LF starts a new rrdtool command. An attacker controlling this free-form string (e.g. the graph_title request parameter stored in user_title and re-em
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.