CVE-2026-42168 | django-pyas2 up to 1.2.3 Partner Model pyas2/utils.py os.system cmd_receive/cmd_send os command injection

July 17, 2026 Yanac

A vulnerability was found in django-pyas2 up to 1.2.3. It has been rated as problematic. Affected is the function os.system of the file pyas2/utils.py of the component Partner Model. This manipulation of the argument cmd_receive/cmd_send causes os command injection.

The identification of this vulnerability is CVE-2026-42168. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More