CVE ID :CVE-2026-66088 Published : Oct. 29, 2026, 1:35 a.m. | 49 minutes ago Description :In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-66088 - Unrestricted Command Execution via system.execute

VERWANDTEARTIKEL

CVE-2026-96228 - SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover

CVE-2026-109516 - Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

CVE-2026-42922 - FUXA Authorization Bypass and Remote Code Execution

CVE-2026-113387 - Ortto WordPress Plugin Unauthenticated Configuration Injection Vulnerability

CVE-2026-21157 - Bixby Improper Input Validation Vulnerability

CVE-2026-85749 - MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail