CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-34110 — Guardian language-system passes the id GET parameter directly into a PHP exec() ...

·Source: NIST NVD

Updated:

Executive Summary

Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.

Analysis

Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_session.\" \".$_GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server. CVSS Score: 9.8. Published: 2026-07-01T17:16:34.263.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34110
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 1, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Major UK banks adopt Swift consumer payments framework

Barclays, HSBC, Lloyds and NatWest will be among the first financial institutions in the world to go live with Swift's new framework for cross-border retail payments.

Finextra
MEDIUMVulnerabilityNEW

Payward completes Reap acquistion

Payward, a unified financial infrastructure platform advancing an open, global financial system, today announced the completion of its acquisition of Reap Technologies Holdings Limited (“Reap”), a leading stablecoin-native, card issuing and payments infrastructure company enabling global money movement.

Finextra
MEDIUMVulnerability

Oman Arab Bank completes Visa tokenisation rollout

Oman Arab Bank (OAB) and BPC, a global leader in payment solutions, are marking 10 years of partnership, celebrating a decade of card and payments modernisation that has helped reshape the bank’s issuing and acquiring business in Oman.

Finextra