CVE-2022-26255

Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.

• CWE-79

• https://github.com/Fndroid/clash_for_windows_pkg/issues/2710Exploit, Issue Tracking, Release Notes, Third Party Advisory
• https://github.com/Fndroid/clash_for_windows_pkg/issues/2710Exploit, Issue Tracking, Release Notes, Third Party Advisory

Published

Mar 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26249Survey King v0.3.0 does not filter data properly when export…9.8
• CVE-2022-2625A vulnerability was found in PostgreSQL. This attack require…8
• CVE-2022-26250Synaman v5.1 and below was discovered to contain weak file p…7.8
• CVE-2022-26251The HTTP interface of Synaman v5.1 and below was discovered …7.2
• CVE-2022-26252aaPanel v6.8.21 was discovered to be vulnerable to directory…6.5
• CVE-2022-26254WoWonder The Ultimate PHP Social Network Platform v4.0.0 was…5.3
• CVE-2022-26258D-Link DIR-820L 1.05B03 was discovered to contain remote com…9.8
• CVE-2022-26259A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD…7.8
• CVE-2022-2626Incorrect Privilege Assignment in GitHub repository hestiacp…7.2
• CVE-2022-26260Simple-Plist v1.3.0 was discovered to contain a prototype po…9.8
• CVE-2022-26263Yonyou u8 v13.0 was discovered to contain a DOM-based cross-…6.1
• CVE-2022-26265Contao Managed Edition v1.5.0 was discovered to contain a re…9.8