2 Jul, 2026
CVE-2026-56004 – obs-service-tar_scm: command injection via mercurial handler
The Bit , ,
CVE ID :CVE-2026-56004

Published : July 2, 2026, 2:54 p.m. | 2 hours, 51 minutes ago

Description :A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…