CVE-2026-4786: Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Apr
Released
2026-04-19
Last Updated
2026-04-22
EPSS Score
0.29% (percentile: 21.1%)

Affected Products (1)

Open Source Software

  • azl3 python3 3.12.9-10 on Azure Linux 3.0

Revision History

  • 2026-04-19: Information published.
  • 2026-04-20: Information published.
  • 2026-04-22: Information published.