Tclahr vulnerabilities
We track 4 vulnerabilities in Tclahr products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
Latest Tclahr vulnerabilities
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings wi
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before bei
- 7.8 High severity
uac: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, proc
- 7.8 High severity
UAC: Improper Neutralization of Special Elements used in an OS Command
UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the _run_command() function passes constructed command strings directly to eval without proper