← Database

CVE-2026-5965

CRITICAL CVSS: 9.8 Published: 2026-04-21 Modified: 2026-06-17

Description

NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Affected Platforms

Unknown

Weakness Type

CWE-78

References