CVE-2026-3120CWE-94

RCE in Profelis Informatics' SambaBox

High · published May 4, 2026

CVSS v3.1
7.2
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection.

This issue affects SambaBox: from 5.1 before 5.3.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-05-04T11:53Z
EPSS history
Timeline
  • 04 MAY 11:53Z
    RCE in Profelis Informatics' SambaBox
    cvelistv5