World Wires · story 44604 · official · 1 source(s)

CVE-2026-110635: Critical OS Command Injection in webp-converter

webp-converter before 3.0.0 contains a critical OS command injection vulnerability in helper functions running libwebp binaries with a shell enabled.

Open in the desk

Coverage

• CVE-2026-110635: Critical OS Command Injection in webp-converter NVD: critical CVEs · tier A · clear net · 2026-10-14 15:17 UTC

What this site indexes