CVE-2026-22095

CriticalCVSS 9.3

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

58th percentile - higher than 58% of all known CVEs

Summary

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection. An attacker can remotely execute arbitrary system commands.

Risk Assessment

The risk includes full server compromise, data theft, or disruption of network services.

Recommendation

Immediately update the software to a version that fixes this vulnerability and restrict access to port 8090 to trusted IP addresses only.

Original NVD description (English source)

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection.