TI-2026-09039 CVE-2026-10303 · GHSA-9v83-jvh5-6gh3
ServerCo getssl ACME shell script path injection
Priority LOW 36
In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to…