Unrated severityNVD Advisory· Published Jul 21, 2026· Updated Jul 24, 2026
Command Injection
CVE-2026-64879
Description
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.