by Kastro
Paper/Archive/CVE-2026-107459

CVE-2026-107459

Openfind SecuShare Pro — Openfind｜SecuShare Pro - OS Command Injection

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.6.736 × 2014.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

Affected

ProductAffectedFixed inSource
SecuShare Pro4–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-11254-9c206-1.htmlreftwcert.org.tw/en/cp-139-11255-bce41-2.html