PT-2026-33915 · Newsoft · Newsoftoa

Published 2026-04-21 · Updated 2026-04-21 · CVE-2026-5965

Mitre

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-5965

Affected Products

Newsoftoa

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5965 · Security Note
• https://twcert.org.tw/en/cp-139-10857-c46f7-2.html · Note
• https://twcert.org.tw/tw/cp-132-10856-4979f-1.html · Note