Vulnerability Description
Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings directly to the process standard input without sanitization. In affected deployments, this can result in arbitrary operating system command execution.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://gist.github.com/Misakim1/859c3eb9ced699089ee0747dae9bedc1
- https://github.com/oinone/oinone-pamirs
- https://www.oinone.top/changelog
FAQ
What is CVE-2026-39054?
CVE-2026-39054 is a vulnerability with a CVSS score of 7.3 (HIGH). Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings directly to the proces...
How severe is CVE-2026-39054?
CVE-2026-39054 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-39054?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.