CVE-2026-43641 | Softaculous Virtualizor up to 3.2.8 Billing proc_open uid os command injection

September 22, 2026 Yanac

A vulnerability categorized as very critical has been discovered in Softaculous Virtualizor up to 3.2.8. This affects the function proc_open of the component Billing Module Handler. The manipulation of the argument uid results in os command injection.

This vulnerability is known as CVE-2026-43641. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More