{"id":"CVE-2026-66088","aliases":[],"cve":{"records":[{"id":"CVE-2026-66088","source":"MON-CSIRT","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-24T02:22:10.431Z","published":"2026-10-29T01:35:46.415Z","modified":"2026-10-29T02:02:13.562Z"}],"publishers":[{"name":"MON-CSIRT","role":"CNA","organizationId":"9c1820ae-fb77-4810-a8aa-ca46e7474d2f","modified":"2026-10-29T01:35:46.415Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T02:02:13.562Z"}],"references":[{"url":"https://github.com/openequella/openEQUELLA/security/advisories/GHSA-q8xp-w3fr-hj4v","tags":["vendor-advisory"],"source":"MON-CSIRT"},{"url":"https://openequella.github.io/guides/","tags":["product"],"source":"MON-CSIRT"}],"weaknesses":[{"id":"CWE-78","description":"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')","source":"MON-CSIRT"},{"id":"CWE-749","description":"CWE-749 Exposed dangerous method or function","source":"MON-CSIRT"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T01:50:52.370616Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Unrestricted Command Execution via system.execute","titleSource":"MON-CSIRT","descriptionSource":"MON-CSIRT","description":"In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arbitrary commands with the privileges of the openEQUELLA service account.","score":9.4,"severity":"critical","published":"2026-10-29T01:35:46.415Z","modified":"2026-10-29T02:02:13.562Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Apereo Foundation","name":"openEQUELLA","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2026.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"MON-CSIRT","url":"https://www.cve.org/CVERecord?id=CVE-2026-66088"}],"remediation":[{"text":"Upgrade to vendor recommended versions","source":"MON-CSIRT","url":"https://www.cve.org/CVERecord?id=CVE-2026-66088"}],"references":["https://github.com/openequella/openEQUELLA/security/advisories/GHSA-q8xp-w3fr-hj4v","https://openequella.github.io/guides/"],"sources":[{"name":"CVE","id":"CVE-2026-66088","modified":"2026-10-29T02:02:13.562Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-66088"}],"assessments":[{"source":"MON-CSIRT","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L","score":9.4}],"sourceAffected":[],"observedAt":"2026-10-29T14:42:27.018Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:00:31.626Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T08:45:31.300Z","attemptedAt":"2026-10-29T08:45:31.300Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T08:45:30.791Z","attemptedAt":"2026-10-29T08:45:30.791Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T08:45:30.789Z","attemptedAt":"2026-10-29T08:45:30.789Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T08:45:30.789Z","attemptedAt":"2026-10-29T08:45:30.789Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-112564","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112564","modified":"Oct 29, 2026, 2:02:13 AM","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L","checkedAt":"2026-10-29T08:45:30.789Z"},{"source":"GitHub Advisory Database","id":"GHSA-64mg-3wpj-rcr6","url":"https://github.com/advisories/GHSA-64mg-3wpj-rcr6","modified":"2026-10-29T03:30:38Z","checkedAt":"2026-10-29T08:45:30.791Z"},{"source":"NVD","id":"CVE-2026-66088","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66088","modified":"2026-10-29T04:18:39.647","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-29T08:45:31.300Z"}],"aiSummary":{"text":"openEQUELLA before 2026.1 has an unrestricted command execution vulnerability via system.execute, allowing users who can create or edit scripts to execute arbitrary commands with the service account's privileges. The system.execute function runs operating system commands without validation. A user with script creation or editing access can exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:39:54.117Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-66088"}]}}