PT-2026-4763 · Apache · Apache Continuum

Published 2026-01-26 · Updated 2026-01-26 · CVE-2016-15057

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Continuum (affected versions not specified)

Description The software contains a flaw related to improper neutralization of special elements used in a command, potentially leading to command injection. An attacker gaining access to the installation’s REST API can execute arbitrary commands on the server. The project is no longer supported, and a fix will not be released.

Recommendations Find an alternative solution. Restrict access to the instance to trusted users.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-15057

GHSA-77P9-W6PJ-RMVG

Affected Products

Apache Continuum

References · 8

• https://osv.dev/vulnerability/CVE-2016-15057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-15057 · Security Note
• https://osv.dev/vulnerability/GHSA-77p9-w6pj-rmvg · Vendor Advisory
• https://github.com/apache/continuum · Note
• https://t.me/cveNotify/149847 · Telegram Post
• https://lists.apache.org/thread/hbvf1ztqw2kv51khvzm5nk3mml3nm4z1 · Note
• https://t.me/CVEtracker/43013 · Telegram Post
• http://openwall.com/lists/oss-security/2026/01/26/1 · Note