01 Record

CVE-2026-41450

UAC < 3.3.0 Command Injection via command_collector.sh

HighPUBLISHEDCNA: VulnCheck

Base score8.5 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

UAC < 3.3.0 Command Injection via command_collector.sh

Published

2026-08-21 17:35Z8 HR AGO

Last updated

2026-08-21 17:47Z7 HR AGO

Reserved

2026-04-20

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

High (CVSS 8.5)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Base

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

1b8fc21932f5ef040c947ac81e7ea5a5124cbc99519d581b597e1f14cac19d9f

VendorProductVersionsPlatforms

tclahruac0 to < 3.3.0—