CVE ID :CVE-2026-61498 Published : July 13, 2026, 2:16 p.m. | 17 minutes ago Description :Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands...