CVE-2026-85523 — OS Command Injection in Felisify Informatics' SambaBox

CVE-2026-85523

OS Command Injection in Felisify Informatics' SambaBox PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1.

Affected (CNA)

Vendor / product	Versions
Felisify Information Technologies Industry and Trade Inc. / SambaBox	affected 0 before 5.4.1

CWE

CWE-78

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1258

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.