{"id":"CVE-2026-101947","title":"ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c","summary":"ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single q…","severity":"high","cvss":8.4,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","cwe":["CWE-78"],"vendor":"CellHubs","product":"ExifTool for photo and video","affected":["exiftool_for_photo_and_video 5.0.1-gms"],"published":"2026-10-10","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:13.047","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-101947","references":[{"url":"https://fluidattacks.com/advisories/saturn","label":"help@fluidattacks.com"},{"url":"https://play.google.com/store/apps/details?id=com.exiftool.free","label":"help@fluidattacks.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T18:17:15.827891Z"},"cvssSource":"cna","epss":0.00143,"epssPercentile":0.03559,"ingestedAt":"2026-10-10T04:21:57.821Z","slug":"CVE-2026-101947","body":"## Overview\n\nExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":46.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":220691,"id":"CVE-2026-101947","ts":1792026569766,"field":"cvss","old":null,"new":"8.4"},{"seq":220690,"id":"CVE-2026-101947","ts":1792026569766,"field":"severity","old":"none","new":"high"}]}