CVE-2026-74237

GFI Exinda AI versions before 7.6.5 contain an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function constructs an iperf command from user-supplied server and options parameters without sanitization, allowing injection of arbitrary iperf flags. An ...