Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-85523

OS Command Injection in Felisify Informatics' SambaBox

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Felisify Information Technologies Industry and Trade Inc. SambaBox

Default version status: unaffected

  • 0 to < 5.4.1affected

References