Vulnerability in Cyrilleb79 Nvda-dev-test-toolbox
CVE-2026-28211
The NVDA Dev & Test Toolbox is an NVDA add-on for gathering tools to help NVDA development and testing. A vulnerability exists in versions 2.0 through 8.0 in the Log Reader feature of this add-on. A maliciously crafted log file can lead to…
EPSS: 0.000 (1.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Cyrilleb79 Nvda-dev-test-toolbox — versions >= 2.0, < 9.0
Weakness classification (CWE)
References
- https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/security/advisories/GHSA-39pg-6xpm-mjgf (x_refsource_CONFIRM)
- https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/commit/21a0544432b08971b5d18320e8256be12c610bea (x_refsource_MISC)
- https://github.com/CyrilleB79/NVDA-Dev-Test-Toolbox/releases/tag/V9.0 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-28211?
- CVE-2026-28211 is a high-severity vulnerability in Cyrilleb79 Nvda-dev-test-toolbox, classified under Improper Neutralization of Special Elements in Data Query Logic. CVSS score: 7.8/10. Published 2026-02-26.
- How severe is CVE-2026-28211?
- High severity. CVSS v3 base score is 7.8 out of 10.