Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-11408
Deferred
More InfoOfficial Page
Source-cna@vuldb.com
View Known Exploited Vulnerability (KEV) details
Published At-06 Jun, 2026 | 11:16
Updated At-08 Jun, 2026 | 14:57

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The name of the patch is 805d82e7100d49b79b3beb1b9420e8e458987198. It is best practice to apply a patch to resolve this issue.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.02.1LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary3.16.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary2.06.5MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
Type: Secondary
Version: 4.0
Base score: 2.1
Base severity: LOW
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Primary
Version: 3.1
Base score: 6.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Type: Secondary
Version: 2.0
Base score: 6.5
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-77Primarycna@vuldb.com
CWE-78Primarycna@vuldb.com
CWE ID: CWE-77
Type: Primary
Source: cna@vuldb.com
CWE ID: CWE-78
Type: Primary
Source: cna@vuldb.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://drive.google.com/drive/folders/1DO-kB1eUoB1CksJ_ZKzpUaX0kp5Rgm_T?usp=sharingcna@vuldb.com
N/A
https://gist.github.com/menelausx/e632faba4014474fcef6a1f541ca3e4ecna@vuldb.com
N/A
https://github.com/vertex-app/vertex/cna@vuldb.com
N/A
https://github.com/vertex-app/vertex/commit/805d82e7100d49b79b3beb1b9420e8e458987198cna@vuldb.com
N/A
https://vuldb.com/cve/CVE-2026-11408cna@vuldb.com
N/A
https://vuldb.com/submit/818442cna@vuldb.com
N/A
https://vuldb.com/vuln/368967cna@vuldb.com
N/A
https://vuldb.com/vuln/368967/cticna@vuldb.com
N/A
Hyperlink: https://drive.google.com/drive/folders/1DO-kB1eUoB1CksJ_ZKzpUaX0kp5Rgm_T?usp=sharing
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://gist.github.com/menelausx/e632faba4014474fcef6a1f541ca3e4e
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/vertex-app/vertex/
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/vertex-app/vertex/commit/805d82e7100d49b79b3beb1b9420e8e458987198
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/cve/CVE-2026-11408
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/submit/818442
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/368967
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/368967/cti
Source: cna@vuldb.com
Resource: N/A
Change History
0Changes found

Details not found