What is GHSA-9g2h-r3hx-cgvq?

GHSA-9g2h-r3hx-cgvq is a security advisory published by GitHub Security Advisories with High severity. Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions...

Which CVE IDs does GHSA-9g2h-r3hx-cgvq cover?

GHSA-9g2h-r3hx-cgvq covers the following CVE IDs: CVE-2026-105044. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-9g2h-r3hx-cgvqHigh

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-105044 →

📋 Description

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-105044
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0038.md
https://github.com/advisories/GHSA-9g2h-r3hx-cgvq