8.5Yüksek

CVE-2026-105044OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox

Qingteng Host Adaptive Security Platform Yayım: (13 gün önce)

Açıklama

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection

Zayıflık türü (CWE): CWE-78

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Qingteng Host Adaptive Security Platform < 20260929

Kaynaklar ve yamalar