OpenSpug

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

OpenSpug records in CISA KEV

No OpenSpug vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-70539 CVE-2026-108540 · GHSA-wv44-gq26-hmfv

OS command injection in OpenSpug Spug File Transfer

HIGH 76

A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01703 Published 2026-10-11 No fix listed CWE-77

TI-2026-61677 CVE-2026-90770 · GHSA-h5c4-vc34-6jcv

Spug through 3.4.0 Remote Code Execution via ping_check

MEDIUM 42

Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without validation.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01318 Published 2026-09-13 No fix listed CWE-78

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0