Security Advisory

CVE-2026-40456

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-18 10:58:51

Last updated 2026-06-18 12:29:40

Assigner CERT-PL

CVSS score 8.6

State PUBLISHED

Description

An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address parameter being passed to the "exec()" function without proper validation, allowing attackers to execute arbitrary operating system commands.

← Browse all CVEs View on cve.org ↗