Dashboard / CVE-2026-7246

CVE-2026-7246

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-30 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
palletsprojects click < 8.3.3

References & Advisories (7)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.90%
Raw Score 0.009000
Percentile 59.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00900
2026-10-28
0.00900

Intelligence Sources

nvd ref →

External Links