Cpe:2.3:a:softaculous:virtualizor:*:*:*:*:*:*:*:*

CVE-2026-43641 is an OS command injection vulnerability in the Virtualizor billing module that allows unauthenticated remote attackers to achieve root-level code execution via serialized billing data.