CVE-2026-107780 Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...

EUVD-2026-95258

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...

CVE-2026-107780

The Dromara Skyeye platform is vulnerable to an unauthenticated OS command injection vulnerability in the /post/TtsController/textToSpeech endpoint. The root cause is a failure to properly neutralize the format parameter , allowing attackers to inject a single quote to break out of a PowerShell s...

Security Bulletin: ICP Speech to Text, Text to Speech - OpenSSL vulnerability fix.

Summary An OpenSSL vulnerability has been fixed by a Redhat patch https://access.redhat.com/errata/RHSA-2020:1840 included in ICP Watson Text to Speech, Speech to Text v1.1.2 6/19/20. Vulnerability Details CVEID:CVE-2019-1563 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive...

SolarWinds Network Performance Monitor TextToSpeech Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the TextToSpeech class. A crafted request can trigger execution of SQL...