CVE-2026-52102CWE-78command-injection

CVE-2026-52102

Critical · published August 4, 2026

CVSS v3.1
9.8
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02939 · 87.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-08-04T01:16Z
References (3)
https://gist.github.com/NtGabrielGomes/46817d363821cf8c5ff4882c811a4325 · [email protected]https://github.com/openmediavault/openmediavault · [email protected]https://www.openmediavault.org · [email protected]
EPSS history
Timeline
  • 03 AUG 00:00Z
    An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via…
    cvelistv5