Skip to content
OpenAdvisories

Vendor

VITEC

2 known vulnerabilities.

Products

Flamingo 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-60121 Public exploit

    Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

    Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint…

    VITEC Flamingo