CVE-2026-38595

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

im3x Scriptables 在 v2-dev 分支及之前版本中存在一个漏洞，攻击者可通过向 端点上传带有特制文件名的文件，注入任意操作系统命令。

CVE-2026-38595 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. im3x Scriptables 在 v2-dev 分支及之前版本中存在一个漏洞，攻击者可通过向 端点上传带有特制文件名的文件，注入任意操作系统命令。 CVE-2026-38595 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-38595

I. Basic Information for CVE-2026-38595

Affected Products

II. Public POCs for CVE-2026-38595

III. Intelligence Information for CVE-2026-38595

Other References for CVE-2026-38595 (4)

• https://github.com/im3x/Scriptables
• https://github.com/im3x/Scriptables/blob/v2-dev/app.js
• https://github.com/Den-Sec/security-research/blob/master/advisories/gohttpserver/VDR-001-zipslip.md
• https://github.com/Den-Sec/security-research/blob/master/advisories/im3x-scriptables/VDR-003-os-command-injection.md

• https://www.cve.org/CVERecord?id=CVE-2026-38595

Same Patch Batch · n/a · 2026-11-03 · 9 CVEs total

IV. Related Vulnerabilities