HarborGuard / CVE
Back to search
HIGHCVE-2026-39054Published Modified CNA mitre

CVE-2026-39054: Oinone Pamirs 7

Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings directly to the process standard input without sanitization. In affected deployments, this can result in arbitrary operating system command execution.

Metrics

CVSS v3.1
7.3
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • n/a / n/a
    n/a
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References