Back to the CVE list

CVE-2026-28291

OS command injection in Simple Git Project

CVSS score

8.1

EPSS probability

%0.9

Risk score

0.1

Published

6 mo ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.8

CVE-2026-28292OS command injection in Simple Git Project

Vendorsimple-git project Productsimple-git

Patch verified Public Exploits:1EPSS %17 mo ago

9.8

CVE-2026-6951Code injection in N/a Simple Git

Vendorn/a Productsimple-git+3 etkilenen

Patch verified Public Exploits:1EPSS %15 mo ago

8.1

CVE-2026-102826simple-git allows command execution through unblocked Git configuration includes

Vendorsteveukx Productgit-js+4 etkilenen

Patch verifiedEPSS %020 d ago

9.2

CVE-2026-102828simple-git unsafe-operation guard does not block trailer command configuration

Vendorsteveukx Productgit-js+4 etkilenen

Patch verifiedEPSS %020 d ago

8.1

CVE-2026-102827simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

Vendorsteveukx Productgit-js+4 etkilenen

Patch verifiedEPSS %020 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-28291"