Vaelsys vulnerabilities
We track 4 vulnerabilities in Vaelsys products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 22, 2026.
Latest Vaelsys vulnerabilities
- 9.8 Critical severity
Vaelsys: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be
- 9.8 Critical severity
VaelsysV4: Incorrect Privilege Assignment
A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgrid_server.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be perform
- 7.5 High severity
VaelsysV4: Use of a Broken or Risky Cryptographic Algorithm
A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /grid/vgrid_server.php of the component Web interface. Performing a manipulation of the argument xajaxargs results in use of weak hash. The att
- 9.8 Critical severity
VaelsysV4: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_DataObjectProc of the file /grid/vgrid_server.php of the component Web interface. Such manipulation of the argument xajaxargs leads to os comm