Skip to content

CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-09-04
Updated: 2026-09-04
Assigning organization: jpcert

Description

XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xing Inc. XING CPTrans-ME-X

Default version status: unaffected

0 to < 1.8.1.17affected

References