elunez eladmin Application Deployment App.java command injection_CVE-2026-10550

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2026-10550

Source VulDB

Published Jun 2, 2026 at 00:45

Affected Product

Vendor elunez

Product eladmin

Version 2.0

Affected Versions elunez eladmin 2.0
elunez eladmin 2.1
elunez eladmin 2.2
elunez eladmin 2.3
elunez eladmin 2.4
elunez eladmin 2.5
elunez eladmin 2.6
elunez eladmin 2.7

CWE Classification

CWE-77 CWE-74

References

{
    "lastseen": "",
    "description": "A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2026-06-02T00:45:10.375Z",
    "modified": "2026-06-02T00:45:10.375Z",
    "type": "cve",
    "title": "elunez eladmin Application Deployment App.java command injection",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/367646\nhttps://vuldb.com/vuln/367646/cti\nhttps://vuldb.com/cve/CVE-2026-10550\nhttps://vuldb.com/submit/828507\nhttps://github.com/elunez/eladmin/issues/899\nhttps://github.com/elunez/eladmin/",
    "id": "CVE-2026-10550",
    "bulletinFamily": "",
    "cwe": [
        "CWE-77",
        "CWE-74"
    ],
    "cvelist": null,
    "sourceData": "elunez eladmin 2.0\nelunez eladmin 2.1\nelunez eladmin 2.2\nelunez eladmin 2.3\nelunez eladmin 2.4\nelunez eladmin 2.5\nelunez eladmin 2.6\nelunez eladmin 2.7",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "eladmin",
    "version": "2.0",
    "vendor": "elunez",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}