GHSA-64mg-3wpj-rcr6: Arbitrary operating system command execution in openEQUELLA
Before openEQUELLA 2026.1, the system.execute() function available to the scripting engine can run supplied operating system commands without validation or an allow-list of permitted executables.
CERT24