CVE-2026-64879 — Command Injection
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve c…
Published: 2026-07-21 · CVSS: 9.4 · CVSS 4.0
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7