Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/25 6:49 p.m.27 views

CVE-2026-27602 Modoboa has an OS Command Injection

Modoboa is a mail hosting and management platform. Prior to version 2.7.1, execcmd in modoboa/lib/sysutils.py always runs subprocess calls with shell=True. Since domain names flow directly into shell command strings without any sanitization, a Reseller or SuperAdmin can include shell metacharacte...

7.2CVSS0.00566EPSS
SaveExploits1References3
Rows per page
Query Builder