ByteOS Network

NVD Vulnerability Details :

CVE-2026-12195

Received

Source-ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a

Published At-04 Jul, 2026 | 12:16

Updated At-04 Jul, 2026 | 12:16

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	8.5	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 8.5

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-78	Secondary	ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a

CWE ID: CWE-78

Type: Secondary

Source: ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a

References

Hyperlink	Source	Resource
https://github.com/myvesta/vesta/commit/95d7e43bf286d6881ca753dac93cb42d98cc7422	ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a	N/A
https://projectblack.io/blog/local-ai-for-cyber-security/#myvesta-authenticated-rce	ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a	N/A

Hyperlink: https://github.com/myvesta/vesta/commit/95d7e43bf286d6881ca753dac93cb42d98cc7422

Source: ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a

Resource: N/A

Hyperlink: https://projectblack.io/blog/local-ai-for-cyber-security/#myvesta-authenticated-rce

Source: ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History