CVE-2026-16630
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Jul 22, 2026
Vendor
unknown
Description
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly and may be used.