OpenSpug vulnerabilities
We track 2 vulnerabilities in OpenSpug products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest OpenSpug vulnerabilities
- 9.9 Critical severity
Spug: Improper Neutralization of Special Elements used in a Command
A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit ha
- 8.8 High severity
spug: Improper Neutralization of Special Elements used in an OS Command
Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metach