PT-2026-78899
CVE-2025-14601
·
Published
2026-08-20
·
Updated
2026-09-29
Description by
CVSS 4.0
8.6
HighMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
vsDesk versions prior to 14.0101
Description
An OS command injection flaw exists due to insufficient input filtering. This allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands, which could lead to disrupted web server operations, exposure of sensitive data, or full server compromise.
Recommendations
Update to version 14.0101 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾