OS Command Injection in R-SOFT DMS
Priority MEDIUM 42CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters. This allows an authenticated attacker to execute arbitrary system commands with the privileges of the web server user. This issue was fixed in version v3.19-2752 and v3.17-2580.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01228 69th percentileScored 2026-11-07
Fix Fixed DMS (R-SOFT SERWIS): v3.19-2752, v3.17-2580
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| R-SOFT SERWIS | DMS | before v3.19-2752; before v3.17-2580 | v3.19-2752, v3.17-2580 | Patch available | CNA |
- DMS VendorR-SOFT SERWIS Affected before v3.19-2752; before v3.17-2580 Fixed in v3.19-2752, v3.17-2580 Patch available CNA
Remediation
- Fix · CNA DMS (R-SOFT SERWIS) Fixed in v3.19-2752, v3.17-2580
Timeline
- 2026-10-02 Threatist record created from CVE-2026-41876
- 2026-10-03 Alias added: GHSA-pf8q-xpjj-9vfv
References
More R-SOFT SERWIS vulnerabilities
- TI-2026-30285 OS Command Injection in R-SOFT DMS CVSS 4.0CRITICAL 9.0
- TI-2026-30284 Weak password hashing in R-SOFT DMS CVSS 4.0HIGH 8.2
- TI-2026-30283 Insecure Direct Object Reference in R-SOFT DMS CVSS 4.0HIGH 7.1
- TI-2026-30282 Stored XSS in R-SOFT DMS CVSS 4.0MEDIUM 5.1
Sources
- CVE-2026-41876 · CVE Program
- CVE-2026-41876 · NVD
- FIRST EPSS
- GHSA-pf8q-xpjj-9vfv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences