CVE-2026-92531

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.

• CWE-78

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bugtrackernet

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92526A flaw has been found in itsourcecode Leave Management Syste…6.3
• CVE-2026-92527A vulnerability has been found in chatwoot up to 4.17.1. Thi…6.3
• CVE-2026-92528GitLab has remediated an issue in GitLab EE affecting all ve…4.2
• CVE-2026-92529GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-9253The WP Cost Estimation & Payment Forms Builder (E&P Forms) p…7.2
• CVE-2026-92530GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2026-92532Unrestricted file upload vulnerability in the BugTracker.NET…7.5
• CVE-2026-92533Path traversal vulnerability in the BugTracker.NET file down…7.1
• CVE-2026-92536The Paid Membership Plugin, Ecommerce, User Registration For…8.8
• CVE-2026-92537The Newsletter – Send awesome emails from WordPress plugin f…5.3
• CVE-2026-92538The LearnPress – WordPress LMS Plugin for Create and Sell On…6.1
• CVE-2026-92539A service account with user-management permissions in one or…6.7