CVE-2026-64879
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Jul 21, 2026
Vendor
unknown
Description
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.