| Summary | Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details. |
|---|---|
| Publication Date | April 14, 2026, 7:16 a.m. |
| Registration Date | April 15, 2026, 11:39 a.m. |
| Last Update | April 18, 2026, 12:18 a.m. |