Skip to content
OpenAdvisories
High · 7.2 CVE-2026-3120 EUVD-2026-26945GHSA-m9rm-p9p2-3vg9

RCE in Profelis Informatics' SambaBox

Published May 4, 2026 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection.

This issue affects SambaBox: from 5.1 before 5.3.

Affected products

VendorProductAffectedFixed
Profelis Information and Consulting Trade and Industry Limited Company SambaBox 5.1 – < 5.3 5.3

References