CVE-2026-54540 | Pheditor up to 2.0.4 Terminal Feature shell_exec os command injection

July 27, 2026 Yanac

A vulnerability was found in Pheditor up to 2.0.4. It has been declared as problematic. The impacted element is the function shell_exec of the component Terminal Feature. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-54540. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More