Code Injection Vulnerability in Backend Functions of Affected Product by CERTVDE

CVE-2026-60036

What is CVE-2026-60036?

A vulnerability exists in the backend functions of VDE Software that allows a remote attacker with high privileges to exploit a code injection flaw. By manipulating the backends patch activate function, the attacker can execute arbitrary code, resulting in severe ramifications including unauthorized access and potential loss of confidentiality, integrity, and availability of data.

References