Critical · 9.8 CVE-2026-110392 EUVD-2026-100771GHSA-2m98-3p37-f6h9

Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by samsung.tv_appliance

Vendor: Samsung Open Source Product: QA-Board

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.

Affected products

Vendor	Product	Affected	Fixed
Samsung Open Source	QA-Board	—	0.8.x (first public release) through 1.0.1

References

https://github.com/Samsung/qaboard/commit/05789e67c5d022f2403b9340fc8d82dc99dc3707