Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-108546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishin...

7.7CVSS6.5AI score0.00803EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/10 3:16 p.m.•47 views

CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS0.00803EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/10 3:16 p.m.•14 views

CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.5AI score0.00803EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/10/10 3:16 p.m.•25 views

UBUNTU-CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/10 2:15 p.m.•29 views

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/10 2:15 p.m.•25 views

CVE-2026-108546

Spotweb through version 1.5.8 is vulnerable to an OS command injection vulnerability within the runcommand NZB handler . The root cause is the unescaped substitution of shell metacharacters in a spot title for the $SPOTTITLE variable, which is subsequently passed to the exec() function. Remote at...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/10 2:15 p.m.•18 views

EUVD-2026-96341

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/10 2:15 p.m.•21 views

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/10 2:15 p.m.•54 views

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS0.00803EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/10 2:15 p.m.•12 views

CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.4AI score0.00803EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•13 views

PT-2026-109657

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.5AI score0.00803EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/10 12:00 a.m.•15 views

CVE-2026-108546: Improper Neutralization of Special Elements used in an OS Command

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

7.7CVSS6.5AI score0.00803EPSS
SaveExploits0References2
Rows per page
Query Builder