Skip to content
OpenAdvisories

Package · Debian

dolphin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-110236

    KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

    KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters…

    KDE Dolphin dolphin dolphin Debian Ubuntu