CVE-2026-113403Medium· 6.5▾ SunlitArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.
armorx_spam < 8.15.2-3.282.133-1.90.061Update to version 8.15.2-3.282.133-1.90.061 or later
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113402Medium· 6.5ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
CVE-2026-113386High· 7.1Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection
CVE-2026-91831Low· 3.8Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting
CVE-2026-110757Medium· 5.3perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields (CVE-2026-110757)
CVE-2026-111227Medium· 5.5Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives
CVE-2026-111228Medium· 5.5Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives