Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.8 views

CVE-2026-4591

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit...

5.8CVSS5.5AI score0.02097EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/23 6:30 p.m.4 views

EUVD-2026-14457

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit...

5.8CVSS5.5AI score0.02097EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/23 3:15 p.m.33 views

CVE-2026-4591 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit...

5.8CVSS0.02097EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/23 3:15 p.m.2 views

CVE-2026-4591

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit...

5.8CVSS5.5AI score0.02097EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/03/23 3:15 p.m.14 views

CVE-2026-4591

Kalcaddle KodBox 1.64 contains a vulnerability in the fileThumb Endpoint’s checkBin function (file /workspace/source-code/plugins/fileThumb/app.php). The issue allows remote command injection via manipulation of input, with an exploit publicly available. Reported impact is Confidentiality, Integr...

5.8CVSS5.5AI score0.02097EPSS
SaveExploits0References4
Rows per page
Query Builder