Mmastodon TechnologyCybersecurity first seen 17 h ago, last 17 h ago, peak #9

Critical 9.4-severity flaw disclosed in openEQUELLA

Original: 🚨 EUVD-2026-112564 📊 Score: 9.4/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29

A critical vulnerability, tracked as EUVD-2026-112564, has been disclosed in openEQUELLA, the open-source educational content platform maintained by the Apereo Foundation. Rated 9.4 out of 10 on the CVSS v3.1 scale, the flaw affects versions before 2026.1: the scripting engine's system.execute() function runs operating system commands without validation, allowing potential remote command execution. Administrators are being urged to review the advisory, updated 29 October 2026, and upgrade promptly.

Why now: A newly published critical vulnerability in software used by universities is prompting security teams to patch systems.

openEQUELLAApereo FoundationEUVD-2026-112564

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112564 📊 Score: 9.4/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29 📝 In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4063977