8.8High
CVE-2026-84285OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5
Description
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Weakness (CWE):
CWE-78
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Dassault Systèmes | Tuleap Enterprise Edition | 17.3-1 – ≤ 17.3-12, 17.5-1 – ≤ 17.5-28 |