PT-2026-27143 · Kalcaddle · Kodbox

Vuldb + 1 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4591

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-4591

Affected Products

Kodbox

References · 5

• 🔥 https://vulnplus-note.wetolink.com/share/3ml5XA0firIa · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4591 · Security Note
• https://vuldb.com/?id.352427 · Note
• https://vuldb.com/?ctiid.352427 · Note
• https://vuldb.com/?submit.775470 · Note