CRITICAL 9.3 NVD
CVE-2026-107459
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.
References
- https://www.twcert.org.tw/en/cp-139-11255-bce41-2.html
- https://www.twcert.org.tw/tw/cp-132-11254-9c206-1.html
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-08 via NVD.
Risk Timeline
CVE Disclosed2026-10-08 · 3 days ago
Remediation Resources
Analysis & PoC
www.twcert.org.tw/en/cp-139-11255-bce41-2.htmlAnalysis & PoC
www.twcert.org.tw/tw/cp-132-11254-9c206-1.html
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.