CVE-2026-50206

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Incoming VPN network profile settings do not safely process special characters, which allows for command injection through the use of malicious configuration files. Command injection is a technique where an attacker executes arbitrary operating system commands on the server by exploiting insufficient input validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.