EUVD-2026-37875

ID: EUVD-2026-37875

Severity: high

CVSS v4: 8.6 (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address parameter being passed to the "exec()" function without proper validation, allowing attackers to execute arbitrary operating system commands.

Timestamps

Normalized: 2026-06-18T13:10:27Z UTC
Last updated: 2026-06-18T13:10:27Z UTC

References

No references provided.

VulnAI

EUVD-2026-37875

Description

Timestamps

References