CVE-2026-92531
HighCVSS 7.5Summary
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality.
Risk Assessment
An attacker could execute arbitrary commands with the privileges of the account used by the application, potentially leading to system compromise. Exploitation requires svn.exe to be installed and invocable by the service.
Recommendation
Update BugTracker.NET to a version that includes a fix for argument validation in the SVN integration.
Other vulnerabilities in BugTracker.NET
See all- CVE-2026-92533High
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory.
- CVE-2026-92532High
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server.
Original NVD description (English source)
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS