6 matches found
EUVD-2026-60547
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...
PT-2026-76873
Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2 Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script. Recommendations At the moment, there is no information about a newer version that...
CVE-2026-67961
O2OA v10.0.2 is vulnerable: a local attacker with low privileges can execute arbitrary code by bypassing the sandbox mechanism of the Invoke script execution. CVSS 7.8 (High) reflects full confidentiality, integrity, and availability impact. PT Security confirms no fixed version is available yet....
