PT-2026-109730

Name of the Vulnerable Software and Affected Versions OpenSpug Spug versions 3.x through 3.4.0 OpenSpug Spug versions 4.x through 4.0.1 Description A flaw in the File Transfer component allows remote attackers to perform OS command injection via a manipulation of the /exec/transfer endpoint. OS...