Description
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XING CPTrans-ME-X | < 1.8.1.17 | 1.8.1.17 |
Critical · 9.8
CVE-2026-62928
EUVD-2026-70916GHSA-wvq4-q789-f852
XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.
Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by jpcert