EUVD-2026-24054CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
9DescriptionNVD
NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.
AnalysisAI
OS command injection in NewSoft NewSoftOA allows remote unauthenticated attackers to execute arbitrary system commands on the server. CVSS 9.3 (Critical) with network attack vector and no authentication required. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and isolate all NewSoftOA instances from production networks; document affected versions and deployment locations; establish communication with NewSoft for patch timeline. Within 7 days: Implement network segmentation and access controls restricting NewSoftOA to essential users only; deploy enhanced monitoring for command execution and network connections from NewSoftOA processes. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today