Reported by 2 outlets
Openfind SecuShare Pro CVE-2026-107459 Unauthenticated RCE
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 4.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.02 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Analysis
Openfind SecuShare Pro v4 is affected by CVE-2026-107459, a CVSS 9.8 (reports vary 9.3) unauthenticated OS command injection via CWE-78. Event sources describe unauthenticated RCE through a single HTTP request with no credentials needed. It is a critical vulnerability in a file-sharing product that requires immediate patching or mitigation.
Timeline
-
original reporting
Openfind SecuShare Pro v4 is affected by CVE-2026-107459 (CRITICAL, CVSS 9.3) — unauthenticated OS command injection allows remote code exec
radar.offseq.com · 5d ago · October 8th, 2026
Openfind SecuShare Pro v4 is affected by CVE-2026-107459 (CRITICAL, CVSS 9.3) — unauthenticated OS command injection allows remote code exec
via Mastodon https://radar.offseq.com/threat/cve-2026-107459-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-864ce7371e089cbd
-
original reporting
🚨 CVE-2026-107459 — Openfind SecuShare Pro v4 CVSS 9.8 | CWE-78 OS Command Injection | Unauthenticated RCE One HTTP request. No credentials.
threataft.com · 5d ago · October 8th, 2026