Dashboard / CVE-2026-116118

CVE-2026-116118

MEDIUM
MEDIUM Priority: 0.06 BB Relevance: 61/100
Published: 2026-10-26 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Weakness Classification (2)

References & Advisories (5)

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

EPSS — Exploitation Probability

1.05%
Raw Score 0.010500
Percentile 64.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01050
2026-10-28
0.01050

Intelligence Sources

mitre ref →
nvd ref →

External Links