CVE-2026-108546

A flaw was found in Spotweb. An unauthenticated remote attacker can achieve arbitrary command execution on the underlying server. This issue occurs because spot titles are not properly sanitized before being passed into system execution functions within the runcommand handler. When a user downloa...