Threats tagged 'ghsa-8mvw-jrmp-qqqj'

Synway SMG Gateway Management Software has a critical OS command injection vulnerability in its RADIUS configuration endpoint. The vulnerability arises because the radius_address POST parameter is unsafely used in a shell command without sanitization, allowing unauthenticated remote attackers to execute arbitrary commands. This flaw affects remote code execution and was first observed exploited in July 2025. No specific affected versions or patches are currently documented.