CVE-2026-9302

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of the component VpsTest Console. Executing a manipulation of the argument vf can lead to code injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-94

• https://github.com/546669204/vps-inventory-monitoring/
• https://github.com/546669204/vps-inventory-monitoring/issues/36
• https://github.com/dntyfate/cve/issues/2
• https://vuldb.com/submit/811843
• https://vuldb.com/vuln/365249
• https://vuldb.com/vuln/365249/cti

Published

May 23, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93012Email::Sender::Transport::Sendmail versions before 2.602 for…9.8
• CVE-2026-93013RAGFlow through 0.27.2 contains a path traversal vulnerabili…4.3
• CVE-2026-93014RosarioSIS versions before 12.9 fail to validate the filenam…7.1
• CVE-2026-93015BlueKitchen BTstack through 1.8.2 fails to validate the peer…6.3
• CVE-2026-93018Imager versions before 1.036 for Perl disclose uninitialised…5.5
• CVE-2026-93019Imager versions before 1.036 for Perl exit the process readi…9.1
• CVE-2026-9303A vulnerability was identified in calcom cal.diy up to 4.9.4…4.3
• CVE-2026-93030FTM 4.x ALL could allow a remote authenticated attacker to o…6.5
• CVE-2026-93031The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-o…8.8
• CVE-2026-93037In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-93038In the Linux kernel, the following vulnerability has been re…
• CVE-2026-93039In the Linux kernel, the following vulnerability has been re…7.4