QuantaStor alertConfigSet smtpPassword command injection

Authenticated JSON-RPC alertConfigSet writes an unsanitized smtpPassword into the root qsservice alert email shell command; alertRaise triggers execution as root delayed async dispatch. !/usr/bin/env python3 -- coding: utf-8 -- """OSNexus QuantaStor alertConfigSet smtpPassword command injection...

OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE — Detect

Fingerprint / reachability check for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE""" from kittysploit import from...

CVE-2026-18265

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18265

The vulnerability is in the configuration of Kapacitor within OSNEXUS QuantaStor, where missing authentication on a network-accessible endpoint allows unauthenticated attackers to execute arbitrary code as root (CVSS 9.8). Affected versions are not specified and no fix or patch version is availab...

CVE-2026-18265 OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

EUVD-2026-63483

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18265 OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-18265: Missing Authentication for Critical Function

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

PT-2026-65933

Name of the Vulnerable Software and Affected Versions OSNEXUS QuantaStor affected versions not specified Description Remote attackers can execute arbitrary code on affected installations without authentication. The flaw is located in the configuration of Kapacitor, where a lack of authentication...

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of Kapacitor. The issue results from the lack of authentication pri...

OSNEXUS QuantaStor Manager Panel - Detect

OSNEXUS QuantaStor Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """OSNEXUS QuantaStor Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OSNEXUS QuantaSto...

CVE-2026-10880

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

CVE-2026-10880

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

CVE-2026-10880 Unauthenticated SQL Injection in Osnexus Quantastor

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

CVE-2026-10880

OSNexus QuantaStor SDS Manager is affected by an unauthenticated SQL injection in the login endpoint. The username is not properly sanitized before being used in a SQL query, enabling a remote attacker (no authentication) to bypass login and gain administrator access. CVSS 3.1 base score 9.8 (Net...

CVE-2026-10880 Unauthenticated SQL Injection in Osnexus Quantastor

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

CVE-2026-10880

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

EUVD-2026-34305

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...

OSNexus QuantaStor SDS Manager security vulnerabilities

OSNexus QuantaStor SDS Manager is a software-defined storage management platform developed by the American company OSNexus. There is a security vulnerability in OSNexus QuantaStor SDS Manager. This vulnerability stems from improper cleaning of the user name field in the login endpoint, allowing...

CVE-2026-10880: Improper Neutralization of Special Elements used in an SQL Command

OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an administrator without supplying a val...