CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-34107 — Guardian language-system passes the id GET parameter directly into a PHP exec() ...

·Source: NIST NVD

Updated:

Executive Summary

Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.

Analysis

Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server. CVSS Score: 9.8. Published: 2026-07-01T17:16:33.837.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34107
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 1, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Lloyds joins Integral global FX liquidity network

Integral, a leading currency technology provider to financial markets, today announced that Lloyds has joined its ecosystem as a liquidity provider, further strengthening its institutional FX network.

Finextra
MEDIUMVulnerability

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue

CVE-2026-45659
The Hacker News
MEDIUMVulnerability

Quantum Breakthroughs Compress Post-Quantum Computing Timeline

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/quantum-breakthroughs-compress-post-quantum-computing-timeline-image_small-2-a-32137.jpg" align=right hspace=4><b>Microsoft, Google and AWS cite major gains in reliability and error correction.</b><br>Rapid advances in quantum hardware, AI-assisted error correction and fault-tolerant architectures from Microsoft, Google and Amazon

Bank Info Security