Unrated severityNVD Advisory· Published Jul 4, 2026· Updated Jul 6, 2026

CVE-2026-12195

Description

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.

Patches

Vulnerability mechanics

References

github.com/myvesta/vesta/commit/95d7e43bf286d6881ca753dac93cb42d98cc7422mitrepatch
projectblack.io/blog/local-ai-for-cyber-security/mitreexploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000