Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named `cmd.exe` is located in the current working directory it will be called by the `Process` class when preparing command arguments, leading to possible hijacking. This issue has been addressed in release versions 5.4.46, 6.4.14, and 7.1.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
今月は4件全てがSeverity/Risk: Seriousですね CVE-2026-26045 CVE-2026-26046 CVE-2026-26047 CVE-2024-51736 Security announcements | Moodle https://moodle.org/mod/forum/view.php?id=7128
Post summary
Four CVEs are listed as serious in a Moodle security announcement, but the post contains no additional details such as PoC, exploit, patch, or technical specifics.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows | - | - | - |
| App | sensiolabs | symfony | - | - | - |