CVE Catalog
CVE-2026-37281
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.62%
74th percentile - higher than 74% of all known CVEs
Summary
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter.
Risk Assessment
Risk includes remote code execution on the server, potentially leading to full application compromise and data access.
Recommendation
Upgrade Zenshin to version 2.7.0 or later.
Original NVD description (English source)
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter.