DossierENTITY

CVE-2026-40176

Coverage of CVE-2026-40176 in the Nexus archive.

Earliest in view: Apr 14 · 15:57 UTCMost recent: Apr 14 · 15:57 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYApr 14 · 15:57 UTCTHE HACKER NEWS
New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released
Two high-severity command injection vulnerabilities in Composer's Perforce VCS driver could allow arbitrary command execution. Patches have been released to address these flaws, which are tracked as CVE-2026-40176 and another unspecified CVE.