Critical severity9.8NVD Advisory· Published May 2, 2022· Updated Jun 17, 2026

CVE-2022-28054

Description

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VanDyke Software/VShell for Windowsdescription
VanDyke Software/VShell for Windowsllm-create
Range: = 4.6.2

Patches

Vulnerability mechanics

References

www.vandyke.com/support/advisory/2022/02/remote-execution-via-triggers.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.025
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000