CVE-2026-66088

In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...

CVE-2026-66088

The openEQUELLA application (versions before 2026.1 ) is vulnerable to OS Command Injection due to the system.execute() function in its scripting engine. This function executes supplied operating system commands without any validation or an allow-list of permitted executables. A user with the abi...

CVE-2026-66088 Unrestricted Command Execution via system.execute

In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...

EUVD-2026-112564

In openEQUELLA before 2026.1, the system.execute function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of t...