CVE-2026-67599_ClearOS_RCE

日志查看器过滤器参数中的OS命令注入 包: ClearFoundation 测试版本: ClearOS 7.9.1.342252 漏洞类型: 操作系统命令注入（CWE-78） 严重性: 高 CVE : CVE-2026-67599 CVSS v3.1 向量: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H（评分：7.2） 感谢 VulnCheck 代表我帮助分配和跟踪此 CVE-2026-67599。 产品描述 ClearOS 是一个基于 CentOS/RHEL...

CVE-2026-67599

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599 ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599 ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599

Summary of technical details (CVE-2026-67599, ClearOS 7.9) : An OS command injection vulnerability exists in the Log Viewer endpoint used by the webconfig user. The vulnerability stems from the filter parameter being unsafely interpolated into a shell command in File.php, allowing command substit...

PT-2026-67488

Name of the Vulnerable Software and Affected Versions ClearOS version 7.9 Description The Log Viewer component contains an OS command injection flaw. Authenticated attackers can execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly...

CVE-2026-67599: Improper Neutralization of Special Elements used in an OS Command

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

Exploit for CVE-2026-67599

OS Command Injection in Log Viewer Filter Parameter Package...

ClearOS 7 Community Edition Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ClearOS 7 Community Edition | Cross-Site Scripting Exploit Author: Ozer Goker Vendor Homepage: https://www.clearos.com Software Link: http://mirror.clearos.com/clearos/7/iso/x8664/ClearOS-DVD-x8664.iso Version: 7 Introduction...

ClearOS 7 Community Edition Cross Site Scripting

Exploit Title: ClearOS 7 Community Edition | Cross-Site Scripting Date: 06.03.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.clearos.com Software Link: http://mirror.clearos.com/clearos/7/iso/x8664/ClearOS-DVD-x8664.iso Version: 7 Introduction ClearOS is a small business server...