CVE-2026-78211
CriticalCVSS 9.8Summary
The 4MOSAn GCB Doctor product by 4MOSAn Security Technology has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.
Risk Assessment
An attacker can gain full control of the server, compromising confidentiality, integrity, and availability of data and the system.
Recommendation
Immediately remove or secure the ADOdb test page and apply vendor patches. Restrict access to the application to trusted networks only.
Original NVD description (English source)
4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.