Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #9

Critical command injection flaw found in ppt2png tool

Original: 🔴 CVE-2026-107699 - Critical (9.8) ppt2png through 0.0.6 contains an OS command injection vulnerability that allows atta

A critical vulnerability, CVE-2026-107699, has been disclosed in ppt2png through version 0.0.6, receiving a maximum severity score of 9.8. The flaw is an operating system command injection: attackers can execute arbitrary commands by passing unsanitized input or output path arguments, appending shell metacharacters such as ';'. Security commentators are urging anyone using the tool to update or stop using affected versions.

Why now: A newly disclosed maximum-severity vulnerability allowing remote command execution is drawing urgent attention from the security community.

ppt2pngCVE-2026-107699

Open on mastodon →

Evidence

• 🔴 CVE-2026-107699 - Critical (9.8) ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1521139