critical9.8
CVE-2026-37281
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary comma…
Impact
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter.
Affected products
| Product | Affected versions |
|---|---|
| Hitarth-Gg Zenshin | before 2.7.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.