CVE-2026-9147

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 22, 2026

Last Seen

September 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Remote Code Execution Vulnerabilities Found in OpenCode and OpenMed70.5

A remote code execution (RCE) vulnerability (GHSA-632h-h47v-g4x4) was discovered in OpenCode, an open-source AI coding agent, affecting versions prior to 1.18.22. The vulnerability arises from a content-type confusion in the /global/upgrade API endpoint, allowing attackers to execute malicious code...