CVE-2026-103038

Deferred Deferred - Pending Action

PingTools Network Utilities Command Injection Vulnerability

Publication date: 2026-10-19

Last updated on: 2026-10-20

Assigner: Fluid Attacks

Description

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-19

Last Modified

2026-10-20

Generated

2026-11-09

AI Q&A

2026-10-19

EPSS Evaluated

2026-11-07

NVD

CVE-2026-103038

EUVD

EUVD-2026-104454

Affected Vendors & Products

Vendor	Product	Version / Range
StreamSoft	PingTools Network Utilities	4.64

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

PingTools Network Utilities 4.64 Free allows an attacker to inject an arbitrary value into the Host field of a Watcher ICMP service. This value is then used in a command string executed as 'sh -c', enabling arbitrary command execution on the system.

Detection Guidance

To detect this vulnerability, monitor for unexpected command execution or network activity from the PingTools application. Check for unusual processes spawned by sh -c with arbitrary arguments. Inspect logs for ICMP Watcher service inputs containing shell metacharacters like ;, |, &, or $.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary commands on your device if you are using the vulnerable version of PingTools Network Utilities. This may lead to unauthorized access, data theft, or further compromise of your system.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized execution of commands within the application's context. If exploited, it may lead to unauthorized access to sensitive data processed or stored by PingTools, such as network information or user activity data. This could violate data protection requirements under GDPR (e.g., unauthorized processing or access) and HIPAA (e.g., unauthorized access to protected health information if such data were involved).

Mitigation Strategies

Immediately uninstall or stop using PingTools Network Utilities 4.64 or earlier versions. Check for updates from the developer and apply patches if available. Monitor network traffic for unusual ICMP commands or unexpected sh -c executions.

Hi! I’m here to help you understand CVE-2026-103038. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...