Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PRJBLK

Description

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

myvesta vesta

Default version status: unaffected

  • 0 to < 95d7e43bf286d6881ca753dac93cb42d98cc7422affected

References