Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.00906·Published 2026-10-06·Fixed in 5.4.1CWE-78