CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the vftpuser parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVest...

CVE-2026-12195: Improper Neutralization of Special Elements used in an OS Command

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the vftpuser parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVest...

PT-2022-11444

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4 Description A user enumeration issue allows an attacker to identify valid FTP usernames. Recommendations For MELAG FTP Server version 2.2.0.4, consider restricting access to the FTP server until a patch is...