CVE-2026-22103

CriticalCVSS 9.3

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.31%

67th percentile - higher than 67% of all known CVEs

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection. An attacker can remotely execute arbitrary system commands.

The risk for the organization includes full server compromise, data theft, or service disruption.

Immediately update the software to the latest version and implement input validation on the NPC start endpoint.

Original NVD description (English source)

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.