{"cves":{"cve":{"cveNumber":"CVE-2026-8051","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8051"}},"description":"Ivanti Virtual Traffic Manager是一款基于软件的应用交付控制器。\n\nIvanti Virtual Traffic Manager存在操作系统命令注入漏洞，该漏洞源于OS命令注入点未对管理员输入进行充分过滤。攻击者可利用该漏洞以管理员身份执行任意操作系统命令，实现远程代码执行。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2026-8051?language=en_US","isEvent":"通用软硬件漏洞","number":"CNVD-2026-43368","openTime":"2026-10-30","patchDescription":"Ivanti Virtual Traffic Manager是一款基于软件的应用交付控制器。\r\n\r\nIvanti Virtual Traffic Manager存在操作系统命令注入漏洞，该漏洞源于OS命令注入点未对管理员输入进行充分过滤。攻击者可利用该漏洞以管理员身份执行任意操作系统命令，实现远程代码执行。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Ivanti Virtual Traffic Manager操作系统命令注入漏洞的补丁","products":{"product":"Ivanti Virtual Traffic Manager <22.9r4"},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-8051","serverity":"高","submitTime":"2026-05-18","title":"Ivanti Virtual Traffic Manager操作系统命令注入漏洞"}