PT-2026-63512 · Syncfusion · Ej2-Javascript-Ui-Controls

Wjm2 · CVE-2026-16630 · Published 2026-07-22 · Updated 2026-07-22

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-16630

Affected Products

Ej2-Javascript-Ui-Controls

References · 7

• 🔥 https://github.com/syncfusion/ej2-javascript-ui-controls/issues/215 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16630 · Security Note
• https://github.com/syncfusion/ej2-javascript-ui-controls · Note
• https://vuldb.com/vuln/382380/cti · Note
• https://vuldb.com/vuln/382380 · Note
• https://vuldb.com/cve/CVE-2026-16630 · Note
• https://vuldb.com/submit/860232 · Note