Skip to content
OpenAdvisories

Package · Debian

php-horde-vfs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-60102

    Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver

    Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arb…

    horde Vfs php-horde-vfs php-horde-vfs Debian Ubuntu