CVE-2026-50872

An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request.

Score
CVSS 3.1 9.8 Critical
Status
Deferred - cve@mitre.org
Published
2026-06-15
Last modified
2026-06-16
Weaknesses
CWE-94

References

 
 
© AVABIS GmbH privacypolicy about