Frequency
3
occurrences
First Seen
April 14, 2026
Last Seen
April 16, 2026
Related Threat Clusters
-
Critical Command Injection Vulnerabilities in Composer's Perforce Driver
Two command injection vulnerabilities, CVE-2026-40176 and CVE-2026-40261, have been identified in Composer's Perforce VCS driver, allowing attackers to execute arbitrary commands on user systems. CVE-2026-40176,…
5 articles · Updated April 15, 2026
Recent Intelligence Reports
- PHP Composer vulnerabilities allow arbitrary command execution | brief — Scworld · April 16, 2026
- Composer 2.9.6 Fixes Two Perforce Command Injection Vulnerabilities — Laravel-News · April 15, 2026
- Composer 2.9.6: Perforce Driver Command Injection Vulnerabilities (CVE-2026 ... — Blog.Packagist · April 14, 2026