CVE-2026-59111
|
| |
|
|
Affected software |
MACOS |
|
|
|
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a informační agentura (DIA) eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme (czeeopauth://) for parameterized application execution. Prior to version 3.6.0, incoming URL parameters were passed to the compiled AppleScript wrapper using concatenation without sufficient sanitization. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-59111 |
