CVE-2016-6266

ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) host or (2) apikey parameter in a register action, (3) enable parameter in a save_stting action, or (4) host or (5) apikey parameter in a test_connection action.

• CWE-20

• https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
• https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory
• https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
• https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory

Published

Jan 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6259Xen 4.5.x through 4.7.x do not implement Supervisor Mode Acc…
• CVE-2016-6261The idna_to_ascii_4i function in lib/idna.c in libidn before…
• CVE-2016-6262idn in libidn before 1.33 might allow remote attackers to ob…
• CVE-2016-6263The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in…
• CVE-2016-6264Integer signedness error in libc/string/arm/memset.S in uCli…7.5
• CVE-2016-6265Use-after-free vulnerability in the pdf_load_xref function i…
• CVE-2016-6267SnmpUtils in Trend Micro Smart Protection Server 2.5 before …8.8
• CVE-2016-6268Trend Micro Smart Protection Server 2.5 before build 2200, 2…7.8
• CVE-2016-6269Multiple directory traversal vulnerabilities in Trend Micro …9.1
• CVE-2016-6270The handle_certificate function in /vmi/manager/engine/manag…8.8
• CVE-2016-6271The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows m…
• CVE-2016-6272XPath injection vulnerability in Epic MyChart allows remote …