EUVD-2026-12214

A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmcsync.php of the component HTTP Request Handler. Executing a manipulation of the argument templatepath can lead to os command injection. The...

CVE-2026-4170

A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmcsync.php of the component HTTP Request Handler. Executing a manipulation of the argument templatepath can lead to os command injection. The...

TOPSEC TopACM 操作系统命令注入漏洞

TOPSEC TopACM is an application access control and security management system developed by TOPSEC Corporation in China. Version 3.0 of TOPSEC TopACM contains a vulnerability related to operating system command injection. This vulnerability arises from incorrect handling of parameters in the...

CVE-2026-4170 Topsec TopACM HTTP Request nmc_sync.php os command injection

A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmcsync.php of the component HTTP Request Handler. Executing a manipulation of the argument templatepath can lead to os command injection. The...

CVE-2026-4170 Topsec TopACM HTTP Request nmc_sync.php os command injection

A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmcsync.php of the component HTTP Request Handler. Executing a manipulation of the argument templatepath can lead to os command injection. The...

CVE-2023-7304

CVE-2023-7304 — Ruijie RG-UAC Application Management Gateway suffers a command-injection in the nmc_sync.php interface. An unauthenticated attacker who can reach the endpoint can inject shell commands, causing the application to execute arbitrary commands on the host. A successful exploit can yie...