vsDesk vulnerabilities
We track 3 vulnerabilities in vsDesk products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
Latest vsDesk vulnerabilities
- 9.4 Critical severity
vsDesk: Unrestricted Upload of File with Dangerous Type
An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file,
- 8.6 High severity
vsDesk: Use of Potentially Dangerous Function
An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operatio
- 9.3 Critical severity
vsDesk: Authentication Bypass by Primary Weakness
An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provi