CVE-2026-40517
OS command injection in Radare2
CVSS score
7.8
EPSS probability
%1.1
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
NVD reference
https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
Makefile Go / Python
GitHub
https://github.com/radareorg/radare2/issues/25730
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2026-6942OS command injection in Radare2 Mcp Server
Patch verified Public Exploits:1EPSS %2
7.8
CVE-2026-40499OS command injection in Radare2
Patch verified Public Exploits:1EPSS %1
7.8
7.8
CVE-2026-6941Path traversal in Radare2
Patch verified Public Exploits:1EPSS %0
7.8
CVE-2026-14789Memory buffer overflow in Radare2
Patch verified Public Exploits:1EPSS %0
7.8
CVE-2026-14759Memory buffer overflow in Radare2
Patch verified Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-40517"