UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-38595
An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-03T17:20:13.885968+00:00
- Cve id
- CVE-2026-38595
- First seen by Signal
- 2026-11-03T17:21:19+00:00
- Retrieved at
- 2026-11-03T17:21:19+00:00
- Published at
- 2026-11-03T17:18:12.917
- Last modified
- 2026-11-03T17:18:12.917
Explore deeper with Ninja Signal's threat intelligence graph