CVE-2026-67599_ClearOS_RCE

Инъекция команд ОС в параметр фильтра Log Viewer Пакет: ClearFoundation Протестированные версии: ClearOS 7.9.1.342252 Тип уязвимости: OS Command Injection CWE-78 Серьёзность: Высокая CVE : CVE-2026-67599 Вектор CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Оценка: 7.2 Спасибо VulnCheck ...

CVE-2026-67599 ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can...

CVE-2026-67599

Summary of technical details (CVE-2026-67599, ClearOS 7.9) : An OS command injection vulnerability exists in the Log Viewer endpoint used by the webconfig user. The vulnerability stems from the filter parameter being unsafely interpolated into a shell command in File.php, allowing command substit...