Skip to content
OpenAdvisories
High · 8.8 CVE-2026-85523 EUVD-2026-93399GHSA-9hwp-5hjw-2623

OS Command Injection in Felisify Informatics' SambaBox

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by TR-CERT

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection.

This issue affects SambaBox: before 5.4.1.

Affected products

VendorProductAffectedFixed
Felisify Information Technologies Industry and Trade SambaBox < 5.4.1 5.4.1

References