Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can exploit this vulnerability through crafted evidence inputs, mounted images with hostile filenames, or tampered artifact definitions to achieve remote code execution on the analyst's host when processing evidence.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-41449 UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute ar… https://www.cve.org/CVERecord?id=CVE-2026-41449
Post summary
The message announces a command injection flaw in UAC before version 3.3.0, providing the vulnerability type but no PoC, exploit, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-41449 UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute ar… https://www.cve.org/CVERecord?id=CVE-2026-41449 ----- Traducción: CVE-2026-41449 UAC… http://infoflow.cloud`
Post summary
The text discloses CVE-2026-41449, a command injection vulnerability in UAC versions prior to 3.3.0, and provides a link to the CVE record.