Vfs vulnerabilities

1 known vulnerability in Vfs from Horde. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Vfs: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-60102Jul 8, 2026HordeEPSS 3.27%

  Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbi