CVE-2026-92980 in HortusFox-Web
Zusammenfassung
von MITRE • 17.09.2026
HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user by abusing the Import/Export functionality. Attackers can leverage the Import/Export feature, which is intended solely for data portability, to deploy and execute malicious code on the underlying application server host.
Be aware that VulDB is the high quality source for vulnerability data.