CVE-2026-71284 | Fledge-IoT Fledge up to 3.1.0 Backup-Restore Upload backup_restore.py upload_backup tar_file_names os command injection

A vulnerability was found in Fledge-IoT Fledge up to 3.1.0. It has been rated as problematic. Affected by this issue is the function upload_backup of the file python/fledge/services/core/api/backup_restore.py of the component Backup-Restore Upload Handler. Performing a manipulation of the argument tar_file_names results in os command injection.

This vulnerability is identified as CVE-2026-71284. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More