PT-2026-57145 · R Soft Serwis · Dms

Marek Figielski · Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-41876

NVD

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters. This allows an authenticated attacker to execute arbitrary system commands with the privileges of the web server user.

This issue was fixed in version v3.19-2752 and v3.17-2580.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-41876

Affected Products

Dms

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-41876 · Security Note
• https://cert.pl/posts/2026/07/CVE-2026-41876 · Note