Skip to content
OpenAdvisories

Vendor

VITEC

2 known vulnerabilities.

Products

Flamingo 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61498

    Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php

    Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key,…

    VITEC Flamingo
  • Critical 9.8
    CVE-2026-60121 Public exploit

    Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

    Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint…

    VITEC Flamingo