yast2-users vulnerabilities

1 known vulnerability in yast2-users from SUSE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  yast2-users: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-59680Sep 1, 2026SUSEEPSS 1.58%

  An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no num