Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-5965

NewSoft|NewSoftOA - OS Command Injection

Description

NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NewSoft NewSoftOA

Default version status: unaffected

  • 0 to < 10.1.8.3affected

References