Trxtimeattendance

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-89308 Sep 15, 11:44 CRITICAL POC PATCH Act Now

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

PHP RCE Command Injection Trxtimeattendance

NVD GitHub

CVSS 4.0

9.3

CVE-2026-89308

CVSS 9.3

CRITICAL POC PATCH Act Now

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

PHP RCE Command Injection +1

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy