PT-2026-76873 · O2Oa · O2Oa

CVE-2026-67961

Published

2026-08-17

Updated

2026-08-18

CVSS v3.1

7.8

High

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2

Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-67961

O2Oa