EUVD-2026-26945CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection.
This issue affects SambaBox: from 5.1 before 5.3.
AnalysisAI
Remote code execution in SambaBox 5.1-5.2 allows authenticated administrators to inject and execute arbitrary OS commands through improper input sanitization. Attackers with high-privilege access can achieve full system compromise with confidentiality, integrity, and availability impact. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all SambaBox instances running versions 5.1 or 5.2 and document administrative user accounts with access; restrict administrative console access to essential personnel only and require multi-factor authentication. Within 7 days: Implement network segmentation to isolate SambaBox systems from critical infrastructure; enable comprehensive audit logging of all administrative actions; consider deploying a temporary WAF or IPS ruleset if available from vendor advisories. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today