CVE-2026-4786: Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
Overview
- Severity
- N/A
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2026-Apr
- Released
- 2026-04-19
- Last Updated
- 2026-08-10
- EPSS Score
- 0.48% (percentile: 40.4%)
Affected Products (4)
Open Source Software
- azl3 python3 3.12.9-10 on Azure Linux 3.0
Other
- 21379-17084
- 21492-17084
- 21694-17084
Revision History
- 2026-04-19: Information published.
- 2026-04-20: Information published.
- 2026-04-22: Information published.
- 2026-06-03: Information published.
- 2026-06-28: Information published.
- 2026-08-09: Information published.
- 2026-08-10: Information published.