Skip to content
OpenAdvisories

Product · fledge-iot

fledge

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-71284

    Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename

    Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting. Because os.system invokes a shell …

    fledge-iot fledge