Read the docs

NewSoft

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

NewSoft records in CISA KEV

No NewSoft vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-05230 CVE-2026-5965 · GHSA-gg73-7cr3-89ff

NewSoft|NewSoftOA - OS Command Injection

Priority MEDIUM 51

NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01642 Published 2026-04-21 Fixed in 10.1.8.3 CWE-78
Open these records in search →