Dashboard / CVE-2026-35343

CVE-2026-35343

LOW
INFO Priority: 0.00 BB Relevance: 32/100
Published: 2026-04-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: Low
A: None

Description

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
uutils coreutils < 0.7.0

References & Advisories (2)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS — Exploitation Probability

0.14%
Raw Score 0.001350
Percentile 3.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00135
2026-10-28
0.00135

Intelligence Sources

nvd ref →

External Links