CVE-2026-105407 — OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

CVE-2026-105407

OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 PUBLISHED

Description (CNA)

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Tuleap Enterprise Edition	affected 17.0-1 through 17.0-40; affected 17.5-1 through 17.5-31

CWE

CWE-78

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-105407

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.