Command Injection Vulnerability in ArmorX Spam by ArmorX Global Technology
CVE-2026-113403

7.1HIGH

Key Information:

Vendor
CVE Published:
20 October 2026

What is CVE-2026-113403?

The ArmorX Spam product developed by ArmorX Global Technology is susceptible to a Command Injection vulnerability. This flaw allows authenticated remote attackers to inject malicious commands through a specific input parameter. By doing so, attackers can execute arbitrary commands on the server, potentially leading to the upload of harmful code and exploitation of the web application. Proper input validation and sanitization measures are crucial to mitigate this risk. Organizations using affected versions of ArmorX Spam should take immediate action to secure their systems.

Affected Version(s)

ArmorX Spam 0 < 8.15.2-3.282.133-1.90.061

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.