MEDIUM

CVE-2026-120275

Published 2026-11-01 CVSS v3.1

View on NVD View on MITRE Check if this affects your version

CVSS Score

5.5

Description

A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (CWE)

CWE-77 Command Injection

CWE-78 OS Command Injection

References

https://mcniyfj5bw9b.feishu.cn/docx/RenxdtY52oBlqRxN4S7csZtNnUc https://vuldb.com/cve/CVE-2026-120275 https://vuldb.com/submit/1007426 https://vuldb.com/vuln/429619 https://vuldb.com/vuln/429619/cti

Primary Sources

Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.

NVD — NIST Official CVE enrichment, CVSS, CPE

MITRE CVE Program Official CVE record of authority

Does this affect your version?

Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.

Open Detector

Back to CVE Dashboard Search Other CVEs

CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.