Description
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.
Published: 2026-10-07
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution via OS Command Injection
Action: Immediate Patch
AI Analysis

Impact

Operating system command injection occurs within the SVN integration component of BugTracker.NET when the repository field value is passed directly into an svn.exe command without validation. A privileged user can store malicious arguments in the database and cause them to be processed during revision comparison, enabling arbitrary command execution with the privileges of the service account. This CWE-78 flaw can lead to full compromise of the underlying system if exploited successfully.

Affected Systems

The flaw affects all versions of BugTracker.NET where SVN integration is enabled. Administrators with account rights in the application can influence the stored values, and the system must have svn.exe available and executable by the service.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity. EPSS data is not available, so the likelihood of exploitation in the wild is undetermined, and the vulnerability is not listed in CISA's KEV catalog. Successful exploitation requires authenticated administrator privileges, enabled SVN integration, and the presence of svn.exe. Attackers could gain control of the application or the underlying host if they succeed.

Generated by OpenCVE AI on October 7, 2026 at 12:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑released patch for BugTracker.NET that sanitizes the repository field before invoking svn.exe.
  • If a patch is unavailable, disable the SVN integration or remove svn.exe from the system path to prevent the application from executing command-line calls.
  • Ensure the account running BugTracker.NET has the least privileges necessary and avoid running it as a domain administrator.

Generated by OpenCVE AI on October 7, 2026 at 12:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 07 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 07 Oct 2026 11:00:00 +0000

Type Values Removed Values Added
Description Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.
Title Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
First Time appeared Bugtracker.net
Bugtracker.net bugtracker.net
Weaknesses CWE-78
CPEs cpe:2.3:a:bugtracker.net:bugtracker.net:all_versions:*:*:*:*:*:*:*
Vendors & Products Bugtracker.net
Bugtracker.net bugtracker.net
References
Metrics cvssV4_0

{'score': 7.5, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Bugtracker.net Bugtracker.net
cve-icon MITRE

Status: PUBLISHED

Assigner: INCIBE

Published:

Updated: 2026-10-07T14:52:05.056Z

Reserved: 2026-09-16T12:40:29.686Z

Link: CVE-2026-92531

cve-icon Vulnrichment

Updated: 2026-10-07T14:51:59.653Z

cve-icon NVD

Status : Deferred

Published: 2026-10-07T11:17:20.080

Modified: 2026-10-07T15:17:57.740

Link: CVE-2026-92531

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-07T12:45:16Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')