CVE-2026-90843

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmap_newscan of the file functions_nmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 3d52f65803a2716bff14d938352c6fef45b0cfb6. A patch should be applied to remediate this issue. This issue got fixed with a silent patch.

• CWE-77
• CWE-78

• https://calledstriker.gitbook.io/blog/security-research/webmap
• https://github.com/SabyasachiRana/WebMap/
• https://github.com/SabyasachiRana/WebMap/commit/3d52f65803a2716bff14d938352c6fef45b0cfb6
• https://raw.githubusercontent.com/CalledSTRIKER/CalledSTRIKER-gitbook/refs/heads/main/security-research/2026-05-30_12-29.png
• https://vuldb.com/cve/CVE-2026-90843
• https://vuldb.com/submit/925586
• https://vuldb.com/vuln/403395
• https://vuldb.com/vuln/403395/cti

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90831A vulnerability was detected in GNU Binutils 2.47. The affec…5.3
• CVE-2026-90835A flaw has been found in michaelliao itranswarp up to 2.19. …3.5
• CVE-2026-9084MISP’s OIDC authentication plugin allowed automatic linking …6
• CVE-2026-90840A vulnerability was identified in PHPGurukul Blood Donor Man…7.3
• CVE-2026-90841A security flaw has been discovered in PHPGurukul Blood Dono…7.3
• CVE-2026-90842A weakness has been identified in PHPGurukul Blood Donor Man…3.7
• CVE-2026-90844A vulnerability was detected in PHPGurukul Daily Expense Tra…7.3
• CVE-2026-90845A flaw has been found in PHPGurukul Daily Expense Tracker Sy…3.5
• CVE-2026-90846A vulnerability has been found in PHPGurukul Daily Expense T…7.3
• CVE-2026-90847A vulnerability was determined in EFM ipTIME C200E 1.094. Th…9.1
• CVE-2026-90848A weakness has been identified in Governikus AusweisApp up t…4.3
• CVE-2026-90849A security vulnerability has been detected in SourceCodester…7.3