p PatchFirst

CVE-2026-110392

CVE-2026-110392 · Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.

CVSS 9.8 · Critical · EPSS 1.2%

Published
Updated

Affected products and versions

  • qa-board

    Versions
    • 0.8.x (first public release) through 1.0.1: Not affected

    No fix published

Original sources

Check your server →