Skip to content
OpenAdvisories

Product · SUSE

yast2-users

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-59680

    yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute

    An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no nu…

    SUSE yast2-users