CVE-2026-12104: CVE-2026-12104: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.

Özet bilgiler

CVSS v4.0

8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:L/U:Amber

EPSS

%1,32 (yüzdelik 71)

CWE

CWE-78

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wiki.bondix.dev
• wiki.bondix.dev
• CWE-78