CVE-2026-66088 | Apereo openEQUELLA up to 2026.0 Scripting Engine system.execute os command injection

October 29, 2026 Yanac

A vulnerability classified as critical has been found in Apereo openEQUELLA up to 2026.0. Affected is the function system.execute of the component Scripting Engine. The manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-66088. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More