CERT24CVE-2026-94109: openEQUELLA remote code execution vulnerabilityLoading data…
CERT24Threat Observatory
Period

CVE-2026-94109: openEQUELLA remote code execution vulnerability

openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation. Authenticated attackers can inject malicious template expressions through collection summaries, dashboard portlets, or MIME templates and execute arbitrary commands.

← Back to intelligence

CVE-2026-94109: openEQUELLA remote code execution vulnerability

openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation. Authenticated attackers can inject malicious template expressions through collection summaries, dashboard portlets, or MIME templates and execute arbitrary commands.