CVE-2026-84285
8.8 HIGHPublished 2026-09-21 · Updated 2026-09-21
AI risk analysis
- Summary
- The flaw is an OS Command Injection vulnerability in Tuleap Enterprise Edition from versions 17.3 to 17.5, allowing attackers to execute arbitrary commands on the server, posing a significant security risk.
- Exploitability
- Exploitation requires access to the affected version of Tuleap and knowledge of the specific input vectors; however, once compromised, it can be relatively straightforward due to the high CVSS score.
- Blast radius
- If exploited, this vulnerability could lead to complete server compromise, data theft, and potential lateral movement within the network.
- Prioritized remediation
- Upgrade Tuleap Enterprise Edition to a non-affected version immediately or apply vendor-provided patches.
rcewebservervulnerability
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-16022PoC
- HIGHCVE-2026-55897PoC
- HIGHCVE-2026-82412PoC
- CRITICALCVE-2025-29296
- CRITICALCVE-2026-0163
- HIGHCVE-2026-12609PoC
- CRITICALCVE-2026-14175
- HIGHCVE-2026-14553
Related by shared AI tags and CWE weakness class. Browse the full archive.