VYPR

H UI

by Jonssonyan

CVEs (1)

  • CVE-2026-107202CriOct 7, 2026
    risk 0.59cvss 9.1epss 0.01

    A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listen configuration field. When an authenticated administrator submits a value containing shell metacharacters, the application constructs…