6 matches found
EUVD-2026-46391
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality...
CVE-2026-64881
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability...
PT-2026-62105
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The audit file upload handler fails to sanitize filenames, which allows shell metacharacters to be passed into system command execution. This input validation...
PT-2026-62103
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An issue exists in the audit file upload functionality where a filename provided during the upload process is not properly sanitized before being used in system...
