fledge vulnerabilities

1 known vulnerability in fledge from Fledge-iot. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  fledge: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-71284Aug 5, 2026Fledge-iot

  Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting. Because os.system invokes a shell a