High severity8.8NVD Advisory· Published Oct 6, 2026

CVE-2026-85523

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection.

This issue affects SambaBox: before 5.4.1.

Affected products

Felisify Information Technologies Industry And Trade Inc./SambaBoxllm-create
Range: <5.4.1

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1258nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000