Fledge-iot vulnerabilities
We track 1 vulnerability in Fledge-iot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Fledge-iot vulnerabilities
- 7.2 High severity
fledge: Improper Neutralization of Special Elements used in an OS Command
Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting. Because os.system invokes a shell a