8.8Alta
CVE-2026-105407OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
Descripción
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Debilidad (CWE):
CWE-78
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Dassault Systèmes | Tuleap Enterprise Edition | 17.0-1 – ≤ 17.0-40, 17.5-1 – ≤ 17.5-31 |