CVE-2026-50979: n/a

This vulnerability exists in Osbil Technology oPanel's 'advanced/curl' component up to version 1.19.50. Authenticated users can exploit improper input handling in the 'url' parameter to inject and execute arbitrary shell commands on the underlying system. The CVSS v3.1 base score is 8.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality and integrity. No official patch or remediation information is provided in the available data.

Successful exploitation allows an authenticated attacker to execute arbitrary shell commands, potentially leading to full compromise of the affected system's confidentiality and integrity. Availability impact is not indicated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected component to trusted users only and monitor for suspicious activity related to command execution attempts via the 'url' parameter.