Skip to content
OpenAdvisories

Package · Debian

dolphin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.0
    CVE-2026-110236

    KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

    KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters…

    KDE Dolphin dolphin dolphin Debian Ubuntu
  • Medium 6.5
    CVE-2026-41525

    KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of t…

    KDE Dolphin dolphin dolphin Debian Ubuntu