CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-77

• https://github.com/elunez/eladmin/
• https://github.com/elunez/eladmin/issues/899
• https://vuldb.com/cve/CVE-2026-10550
• https://vuldb.com/submit/828507
• https://vuldb.com/vuln/367646
• https://vuldb.com/vuln/367646/cti

Published

Jun 2, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105495Heap-based buffer overflow in Windows Advanced Rasterization…8.8
• CVE-2026-105496Double free in Windows Advanced Rasterization Platform allow…8.8
• CVE-2026-105497Heap-based buffer overflow in Windows Advanced Rasterization…8.8
• CVE-2026-105498Heap-based buffer overflow in Windows Advanced Rasterization…8.8
• CVE-2026-105499Out-of-bounds read in Windows Advanced Rasterization Platfor…8.8
• CVE-2026-1055The TalkJS plugin for WordPress is vulnerable to Stored Cros…4.4
• CVE-2026-105501Incorrect authorization in Windows Installer allows an autho…7.8
• CVE-2026-105503Heap-based buffer overflow in Windows Management Instrumenta…7.8
• CVE-2026-105504An elevation of privilege vulnerability exists in the way th…7
• CVE-2026-105505Relative path traversal in Microsoft Input Method Editor (IM…7.8
• CVE-2026-105506Buffer over-read in Windows Shell allows an authorized attac…5
• CVE-2026-105507An elevation of privilege vulnerability exists in the Window…7.8