Vulnerabilities

TI-2026-02544 CVE-2026-2952 · GHSA-fwf8-cx3q-ch9g

Vaelsys HTTP POST Request tree_server.php os command injection

HIGH 70

A flaw has been found in Vaelsys 4.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.08374 Published 2026-02-22 No fix listed CWE-77

TI-2025-07561 CVE-2025-8261 · GHSA-7xg6-2whq-73vv

HIGH 70

A weakness has been identified in Vaelsys VaelsysV4 4.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00738 Published 2025-07-28 No fix listed CWE-266

TI-2025-07560 CVE-2025-8260 · GHSA-8rhv-2p84-6g62

MEDIUM 45

A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00274 Published 2025-07-28 Fixed in 5.1.1, 5.4.1 CWE-327

TI-2025-07559 CVE-2025-8259 · GHSA-8wmv-6886-5g9j

HIGH 70

A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0323 Published 2025-07-28 Fixed in 5.1.1, 5.4.1 CWE-77