{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/volmarg-personal-management-system-through-2.1.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-118755"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Volmarg Personal Management System through 2.1.0"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eVolmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability. Authenticated users can execute shell commands via unescaped folder paths in the storage module's tree command. By creating a directory under upload/files containing shell metacharacters such as $(...) and performing a move or copy operation, commands are executed as the web server user.\u003c/p\u003e\n","date_modified":"2026-10-28T22:48:55Z","date_published":"2026-10-28T22:48:55Z","id":"https://feed.craftedsignal.io/briefs/2026-10-volmarg-cve-2026-118755/","summary":"Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability in the storage module that allows authenticated users to execute shell commands via unescaped folder paths.","title":"Volmarg Personal Management System OS command injection (CVE-2026-118755)","url":"https://feed.craftedsignal.io/briefs/2026-10-volmarg-cve-2026-118755/"}],"language":"en","title":"CraftedSignal Threat Feed - Volmarg Personal Management System Through 2.1.0","version":"https://jsonfeed.org/version/1.1"}