CVE-2026-34111
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the id parameter, which is passed unsanitized to the PHP exec() function in speechmac_text.php. No authentication is required for exploitation.
Risk Assessment
The risk for the organization includes full server compromise, data theft, malware installation, and using the server as a pivot point for further attacks within the internal network.
Recommendation
Immediately update the Guardian language-system to the latest patched version. As a temporary mitigation, disable access to speechmac_text.php or deploy WAF rules to block shell metacharacters in the id parameter.
Original NVD description (English source)
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.