PT-2026-63512 · Syncfusion · Ej2-Javascript-Ui-Controls

Wjm2 · CVE-2026-16630 · Publicado 2026-07-22 · Atualizado 2026-07-22

Mitre

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly and may be used.

Exploit

Correção

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

CVE-2026-16630

Produtos afetados

Ej2-Javascript-Ui-Controls

Referências · 7

• 🔥 https://github.com/syncfusion/ej2-javascript-ui-controls/issues/215 · Exploit
• https://github.com/syncfusion/ej2-javascript-ui-controls · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16630 · Nota de Segurança
• https://vuldb.com/vuln/382380/cti · Nota
• https://vuldb.com/vuln/382380 · Nota
• https://vuldb.com/cve/CVE-2026-16630 · Nota
• https://vuldb.com/submit/860232 · Nota