CVE-2026-26514

An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags (e.g., -w, -q) via the q parameter. This can be exploited to cause a Denial of Service (DoS) by exhausting system resources.

• CWE-88

• https://github.com/xddxdd/bird-lg-go/commit/6187a4e3afce6d8c29568f8c72ca497d1f5a2b56Patch
• https://github.com/xddxdd/bird-lg-go/issues/136Exploit, Issue Tracking, Vendor Advisory

Published

Mar 4, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26478A shell command injection vulnerability in Mobvoi Tichome Mi…9.8
• CVE-2026-2648Heap buffer overflow in PDFium in Google Chrome prior to 145…8.8
• CVE-2026-26483Mettle SendPortal 3.0.1 and earlier contains a stored cross-…6.1
• CVE-2026-2649Integer overflow in V8 in Google Chrome prior to 145.0.7632.…8.8
• CVE-2026-2650Heap buffer overflow in Media in Google Chrome prior to 145.…8.8
• CVE-2026-2651A vulnerability in MLflow versions <=3.10.1.dev0 allows unau…9
• CVE-2026-2652A vulnerability in mlflow/mlflow versions 3.9.0 and earlier …8.6
• CVE-2026-2653A security flaw has been discovered in admesh up to 0.98.5. …7.8
• CVE-2026-2654A weakness has been identified in huggingface smolagents 1.2…9.8
• CVE-2026-2655A vulnerability was detected in ChaiScript up to 6.1.0. The …2.5
• CVE-2026-2656A flaw has been found in ChaiScript up to 6.1.0. This affect…2.5
• CVE-2026-2657A vulnerability has been found in wren-lang wren up to 0.4.0…5.5