Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClas…
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.06272·Published 2026-04-07·Fixed in 4.0.0.7_20210716.180815CWE-78