CVE-2026-35343EPSS p3.0%
CVE-2026-35343CVE-2026-35343
uutils / coreutils
Description
The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.
Scoring
| CVSS | 3.3 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| EPSS | 0.14% probability of exploitation · percentile 3.0% · 2026-10-27T12:03:15Z |
| Last modified | 2026-10-26 |