Threats tagged 'ghsa-r68m-c6rg-86pf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.5	CVE-2026-124003XWEB EVO before 5.6.2 contains a command injection vulnerability where the setuid-root Lua CGI interpreter wlua High8.52026-11-12GCVE DatabaseCVE-2026-124003 XWEB EVO versions prior to 5.6.2 contain a command injection vulnerability in the setuid-root Lua CGI interpreter 'wlua'. The interpreter executes system calls on unsanitized input, allowing attackers to inject arbitrary commands with root privileges via a .lua CGI endpoint. The product line reached end of service in March 2026. Report on CVE-2026-124003 Vulnerability CWE-250 #ghsa-r68m-c6rg-86pf	GCVE Database	2026-11-12

Page 1 of 1