Lucene search
+L

5 matches found

NVD
NVD
•added 2026/09/13 2:17 a.m.•21 views

CVE-2026-90492

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

7.5CVSS0.02412EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/13 1:30 a.m.•35 views

CVE-2026-90492

CVE-2026-90492 is an OS command injection vulnerability in webgjc web_robot versions 2.4.0, 2.5.0, and 2.8.0 . The flaw resides in the controller_listen/controller_recover functions of py/web.py , where unsanitized input in the case_name argument allows remote command execution. The attack can be...

7.5CVSS6.4AI score0.02412EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/13 1:30 a.m.•12 views

CVE-2026-90492 webgjc web_robot web.py controller_recover os command injection

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

7.5CVSS6.4AI score0.02412EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/13 1:30 a.m.•67 views

CVE-2026-90492 webgjc web_robot web.py controller_recover os command injection

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

7.5CVSS0.02412EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/13 1:30 a.m.•17 views

EUVD-2026-76934

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

7.5CVSS6.4AI score0.02412EPSS
SaveExploits0References4
Rows per page
Query Builder