Critical severityNVD Advisory· Published Sep 15, 2026· Updated Sep 15, 2026

CVE-2026-89308

Description

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trexom/trexom-aggiornamenti-di-sicurezzallm-fuzzy

Patches

Vulnerability mechanics

References

www.acn.gov.it/portale/w/trexom-aggiornamenti-di-sicurezzanvd
www.trexom.net/sviluppo-di-app/nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000