{"cvss":0.0,"datePublished":"2026-01-26T00:00:00Z","dateUpdated":"2026-01-26T00:00:00Z","description":"** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum.\n\nThis issue affects Apache Continuum: all versions.\n\nAttackers with access to the installations REST API can use this to invoke arbitrary commands on the server.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","dueDate":"","id":"CVE-2016-15057","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Apache Continuum","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Apache continuum Improper Neutralization of Special Elements used in a Command","vendor":"Apache Software Foundation"}