Yüksek CVSS 8.5
CVE-2026-105044: CVE-2026-105044: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection
Özet bilgiler
- CVSS v4.0
- 8.5
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,94 (yüzdelik 61)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor