CVE-2026-2952

creationtimestamp| type| source ---|---|--- 2026-02-26 10:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfqwrxe5ft22...

CVE-2026-2952

A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/treeserver.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be carried out remotely. The exploit has...