What is the CVSS score of CVE-2026-1428?

CVE-2026-1428 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Single Sign On Portal System are affected by CVE-2026-1428?

WellChoose's Single Sign-On Portal contains a critical command injection flaw that allows authenticated attackers to execute arbitrary commands on our servers, potentially compromising sensitive…

How to fix or mitigate CVE-2026-1428?

Within 24 hours: Inventory all WellChoose SSO deployments and assess user access patterns; implement enhanced logging and monitoring for suspicious command execution. Within 7 days: Deploy network segmentation to isolate SSO servers and restrict outbound connections; apply WAF rules to detect command injection patterns in SSO Portal input fields. Within 30 days: Evaluate alternative SSO vendors; establish timeline for migration or request emergency patch from WellChoose; conduct security audit of SSO server access logs for signs of exploitation.

Single Sign On Portal System CVE-2026-1428

HIGH

OS Command Injection (CWE-78)

2026-01-26 twcert@cert.org.tw

Command Injection Single Sign On Portal System Wellchoose

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 26, 2026 - 09:15 nvd

HIGH 8.8

DescriptionCVE.org

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

AnalysisAI

WellChoose's Single Sign-On Portal System contains an OS command injection vulnerability that allows authenticated users to execute arbitrary commands on the affected server. Attackers with valid credentials can exploit this flaw to achieve remote code execution with full system privileges. No patch is currently available for this high-severity vulnerability.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Single Sign-On Portal System. Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.