PatchTheCVEparseusbs vulnerabilities and fixes
Recent CVEs affecting parseusbs, with upgrade or downgrade steps. 2 tracked.
parseusbs has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-08. Highest priority: CVE-2026-40029 (score 41/100).
- CVE-2026-40029 HIGH 7.8 UPGRADE parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are p
- CVE-2026-40030 HIGH 7.8 UPGRADE parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v
FAQ
How do I fix parseusbs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is parseusbs being exploited right now?
None of the tracked parseusbs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which parseusbs CVE should I patch first?
CVE-2026-40029 currently ranks highest (41/100): parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are p.