CVE · coverage timeline
CVE-2026-40261Composer has Command Injection via Malicious Perforce Reference
2 articles from 2 outlets between 14 Apr and 15 Apr. First reported by The Hacker News.
- Articles
- 2
- all time · from 2 outlets
- Days with coverage
- 2
- across 2 days
- Busiest day
- 1
- no day with more than one
- Last 7 days
- 0a day
- vs 0 a day before
- First report
- 14 Apr
- The Hacker News
- Exploit probability
- 1.9%
- EPSS · higher than 80% of CVEs
Coverage over time
2 articles · 14 Apr – 15 Apr
- First report14 Apr · The Hacker News
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Tue 14 Apr | 1 | The Hacker News 1 |
| Wed 15 Apr | 1 | Security Affairs 1 |
Articles
2 articles1 article
- PHP Composer bugs enable RCE via Perforce VCS driverSecurity Affairs · mentions it in passing
1 article
- Composer Flaws Let Attackers Run Arbitrary Code via JSONThe Hacker News · first report · mentions it in passing
No articles in this range.