Skip to content

Vendor

vaelsys vulnerabilities

3 published CVES affecting vaelsys, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
2
Low
1
Unscored
0
CISA KEV
0
Atom feed of vaelsys alerts

Products

Latest vaelsys CVEs

Newest publication first

  1. CVE-2026-2952 Vaelsys HTTP POST Request tree_server.php os command injection

    Published
    MediumCVSS 6.9 EPSS 8.4%

    A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be carried out remotely...

  2. CVE-2025-8260 Vaelsys VaelsysV4 Web interface vgrid_server.php weak hash

    Published
    LowCVSS 2.3 EPSS 0.27%

    A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /grid/vgrid_server.php of the component Web interface. Performing a manipulation of the argument xajaxargs results in use of weak hash. The attack is possible to b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.