CVE-2026-108546 | Spotweb up to 1.5.8 NZB handler runcommand SPOTTITLE os command injection

October 10, 2026 Yanac

A vulnerability was found in Spotweb up to 1.5.8 and classified as critical. This vulnerability affects the function runcommand of the component NZB handler. Such manipulation of the argument SPOTTITLE leads to os command injection.

This vulnerability is referenced as CVE-2026-108546. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More