CVE-2026-76760

Deferred Deferred - Pending Action

Code Injection in cc-connect via Authenticate Function

Publication date: 2026-08-19

Last updated on: 2026-08-20

Assigner: VulDB

Description

A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and could be used. The reported GitHub issue was closed automatically due to inactivity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-20

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76760

EUVD

EUVD-2026-63172

Affected Vendors & Products

Vendor	Product	Version / Range
chenhg5	cc-connect	to 1.4.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability is a code injection flaw in the Authenticate function of the file core/webhook.go in chenhg5 cc-connect up to version 1.4.1. The issue allows manipulation of the 'exec' argument, enabling remote attackers to inject malicious code. The exploit has been publicly disclosed and could be actively used.

Detection Guidance

This vulnerability involves code injection via the 'exec' argument in the Authenticate function of chenhg5 cc-connect up to 1.4.1. To detect it, inspect network traffic for unusual requests targeting the webhook endpoint, particularly those containing suspicious 'exec' parameter values. Check server logs for unexpected command execution patterns or unauthorized access attempts.

Impact Analysis

If you use chenhg5 cc-connect up to 1.4.1, attackers could remotely execute arbitrary code on your system through the Authenticate function. This could lead to unauthorized access, data theft, or system compromise depending on the attacker's goals.

Compliance Impact

This vulnerability allows remote code injection via the Authenticate function in core/webhook.go, which could lead to unauthorized access or data breaches. Such breaches may violate GDPR (data protection) and HIPAA (health data confidentiality) by exposing sensitive information, potentially resulting in non-compliance with these regulations.

Mitigation Strategies

Immediately upgrade chenhg5 cc-connect to a version beyond 1.4.1 where the Authenticate function vulnerability is fixed. If an update is unavailable, disable the webhook functionality or restrict network access to the vulnerable component until a patch is applied.

Hi! I’m here to help you understand CVE-2026-76760. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70