CVE-2026-118869

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated…

Risk score: 65/100
CVSS: 8.7 v4.0
Exploit chance (30 days): 1.1%
Published: 5 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: An OS command injection vulnerability in SHIRASAGI may allow an authenticated attacker to execute arbitrary OS commands on the system.
Affected: SHIRASAGI (no specific versions mentioned)
Fix: Check the linked advisory for details on the fix
Exploitation: No known exploitation

Why it is Amber

CVSS 8.7 high

References

https://jvn.jp/en/jp/JVN55454512/
https://www.ss-proj.org/support/1743.html

Original description

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

Last activity 5 Nov 2026. Patch Forecast updates every hour.