CVE-2026-47786
CVE-2026-47786 · Pre-Authentication Command Injection
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later
CVSS 9.3 · Critical · EPSS 1.1% · Fix available
- Published
- Updated
Affected products and versions
hybriddesk station
- Versions
- ≥ 4.2.x, < 4.2.23: Affected (custom)
- ≥ 4.3.x, < 4.3.4: Affected (custom)
Update to 4.2.23; Update to 4.3.4