CVE-2026-113403

Publié : 20 octobre 2026

Modifié : 20 octobre 2026

Score CVSS

6.5

MEDIUM

Description détaillée

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Références et Patchs

https://www.twcert.org.tw/en/cp-139-11295-f2efd-2.html https://www.twcert.org.tw/tw/cp-132-11294-4e5d8-1.html

Dernières Vulnérabilités

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

VOIR DÉTAILS

CVE-2026-43834

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

VOIR DÉTAILS

CVE-2026-113407

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

VOIR DÉTAILS