Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-85082

Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Maple Media Root Browser Classic

Default version status: unaffected

  • 3.3.0affected

References