CVE-2026-3517 - CERT CVE
ID CVE-2026-3517
Sažetak OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command
Reference
CVSS
Base: 8.4
Impact: 6.0
Exploitability:1.7
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW HIGH
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Zadnje važnije ažuriranje 20-04-2026 - 19:05
Objavljeno 20-04-2026 - 14:16