guardian vulnerabilities

Latest high and critical flaws

• CVE-2026-34117 Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec(\"php jobs/teCritical 9.3 · Jul 1, 2026
• CVE-2026-34116 Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without sanitization: exec(\"php jobs/transcribCritical 9.3 · Jul 1, 2026
• CVE-2026-34115 Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15) without sanitization: exec(\"php jobs/trCritical 9.3 · Jul 1, 2026
• CVE-2026-34114 Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) without sanitization: exec(\"php jobs/transCritical 9.3 · Jul 1, 2026
• CVE-2026-34113 Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) without sanitization: exec(\"php jobs/speech_aCritical 9.3 · Jul 1, 2026
• CVE-2026-34112 Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without sanitization: exec(\"php jobs/speech_audCritical 9.3 · Jul 1, 2026
• CVE-2026-34111 Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speecCritical 9.3 · Jul 1, 2026
• CVE-2026-34110 Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/compleCritical 9.3 · Jul 1, 2026
• CVE-2026-34109 Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\"php jobs/speech_audio.Critical 9.3 · Jul 1, 2026
• CVE-2026-34108 Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec(\"php jobs/text.php \".$loCritical 9.3 · Jul 1, 2026
• CVE-2026-34107 Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.Critical 9.3 · Jul 1, 2026
• CVE-2026-34106 Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec(\"php jobs/subtitle_rCritical 9.3 · Jul 1, 2026
• CVE-2026-34105 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, typHigh 8.7 · Jul 1, 2026
• CVE-2026-34104 Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\".$High 8.7 · Jul 1, 2026
• CVE-2026-34103 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FROHigh 8.7 · Jul 1, 2026
• CVE-2026-34102 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '\"High 8.7 · Jul 1, 2026
• CVE-2026-34101 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in text_file.php (line 17): SELECT id, filename, extension, type, duHigh 8.7 · Jul 1, 2026
• CVE-2026-34100 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duratiHigh 8.7 · Jul 1, 2026
• CVE-2026-34099 Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET['Critical 9.3 · Jul 1, 2026