HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-67599 — ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer com...

·Source: NIST NVD

Updated:

Executive Summary

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can inject command substitution payloads into the filter parameter to execute arbitrary commands as the webcon

Analysis

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell command in File.php. Attackers can inject command substitution payloads into the filter parameter to execute arbitrary commands as the webconfig user, and due to extensive NOPASSWD sudo privileges granted to that user by default, immediately escalate to root. CVSS Score: 7.2. Published: 2026-08-03T20:17:28.113.

Indicators of Compromise (1)

CVE (1)
CVE-2026-67599
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 3, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Amgen Tells SEC Hack Exposed Patient Data, Trade Secrets

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/amgen-tells-sec-hack-exposed-patient-data-trade-secrets-image_small-6-a-32401.jpg" align=right hspace=4><b>Drug Maker Says PHI, Research, Confidential Business Data Potentially Stolen</b><br>Pharmaceutical maker Amgen has notified the U.S. Securities and Exchange Commission that cybercriminals have potentially stolen a cache of se

Bank Info Security
MEDIUMVulnerability

Attackers Exploit N-able Patch Bypass Flaw on RMM Servers

Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.

CVE-2026-18577
Dark Reading
HIGHVulnerability

NVD HIGH: CVE-2026-41447 — FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that...

FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\Program Files (x86)\Common Files\SSL\ directory path. Attackers can write a malicious OpenSSL configuration file referencing an attacker-controlled DLL to achieve code execution at startup process privilege lev

CVE-2026-41447
NIST NVD