9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.
AI Analysis
Code Injection vulnerability in Salesforce Uni2TS allowing executable code in non-executable files
Basic Information
ID
CVE-2026-22584
Source
Salesforce
Published
Jan 9, 2026 at 22:10
Modified
Jan 12, 2026 at 16:23
Affected Product
Vendor
Salesforce
Product
Uni2TS
Affected Versions
Salesforce Uni2TS 0
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
Salesforce
Product
Uni2TS
Version
through 1.2.0