CVE-2026-12195
- Source
- https://cve.org/CVERecord?id=CVE-2026-12195
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-12195.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-12195
- Published
- 2026-07-04T11:33:27Z
- Modified
- 2026-10-08T02:50:38Z
- Severity
-
- 8.5 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H CVSS Calculator
- Summary
- [none]
- Details
-
myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.
- Database specific
{ "cna_assigner": "PRJBLK", "cwe_ids": [ "CWE-78" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/12xxx/CVE-2026-12195.json" }- References
Affected packages
Git / github.com/myvesta/vesta
Affected versions
0.*
0.9.8-10
0.9.8-11
0.9.8-12
0.9.8-13
0.9.8-15
0.9.8-16
0.9.8-18
0.9.8-19
0.9.8-26-25
0.9.8-26-29
0.9.8-26-31
0.9.8-26-33
0.9.8-26-35
0.9.8-26-36
0.9.8-26-37
0.9.8-26-38
0.9.8-26-39
0.9.8-26-43
0.9.8-26-44
0.9.8-26-45
0.9.8-26-47
0.9.8-26-48
0.9.8-26-49
0.9.8-26-50
0.9.8-26-51
0.9.8-26-52
0.9.8-26-54
0.9.8-26-55
0.9.8-26-56
0.9.8-26-57
0.9.8-26-58
0.9.8-26-60
0.9.8-26-61
0.9.8-26-62
0.9.9-0
0.9.9-0-11
0.9.9-0-12
0.9.9-0-13
0.9.9-0-15
0.9.9-0-16
0.9.9-0-3
0.9.9-0-4
0.9.9-0-5
0.9.9-0-6