UpSnap vulnerabilities

2 known vulnerabilities in UpSnap from Seriousm4x. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  UpSnap: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-49819Aug 13, 2026Seriousm4xEPSS 1.08%

  UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superuser`. The vulnerable co

• 9.6 Critical severity

  UpSnap: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-49481Aug 12, 2026Seriousm4xEPSS 1.48%

  UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-control