PT-2026-4763 · Apache · Apache Continuum

CVE-2016-15057 · Publicado 2026-01-26 · Atualizado 2026-01-26

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Continuum (affected versions not specified)

Description The software contains a flaw related to improper neutralization of special elements used in a command, potentially leading to command injection. An attacker gaining access to the installation’s REST API can execute arbitrary commands on the server. The project is no longer supported, and a fix will not be released.

Recommendations Find an alternative solution. Restrict access to the instance to trusted users.

Correção

RCE

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2016-15057

GHSA-77P9-W6PJ-RMVG

Produtos afetados

Apache Continuum

Referências · 8

• https://github.com/apache/continuum · Nota
• https://osv.dev/vulnerability/CVE-2016-15057 · Aviso do Fabricante
• https://t.me/cveNotify/149847 · Publicação no Telegram
• https://lists.apache.org/thread/hbvf1ztqw2kv51khvzm5nk3mml3nm4z1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-15057 · Nota de Segurança
• https://t.me/CVEtracker/43013 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-77p9-w6pj-rmvg · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2026/01/26/1 · Nota