Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: VITEC Clear all filters
TI-2026-44079 CVE-2026-61498 · GHSA-h22f-f7h4-9589

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php

Priority HIGH 81

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04008 Published 2026-07-13 No fix listed CWE-78
TI-2026-42838 CVE-2026-60121 · GHSA-37rx-6hw8-mc8w

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

Priority HIGH 81

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw i…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03304 Published 2026-07-13 No fix listed CWE-78