cnvd-2026-43368

cnvd

Description

Ivanti Virtual Traffic Manager是一款基于软件的应用交付控制器。 Ivanti Virtual Traffic Manager存在操作系统命令注入漏洞，该漏洞源于OS命令注入点未对管理员输入进行充分过滤。攻击者可利用该漏洞以管理员身份执行任意操作系统命令，实现远程代码执行。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-8051",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-8051"
    }
  },
  "description": "Ivanti Virtual Traffic Manager是一款基于软件的应用交付控制器。\n\nIvanti Virtual Traffic Manager存在操作系统命令注入漏洞，该漏洞源于OS命令注入点未对管理员输入进行充分过滤。攻击者可利用该漏洞以管理员身份执行任意操作系统命令，实现远程代码执行。",
  "formalWay": "目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2026-8051?language=en_US",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-43368",
  "openTime": "2026-10-30",
  "patchDescription": "Ivanti Virtual Traffic Manager是一款基于软件的应用交付控制器。\r\n\r\nIvanti Virtual Traffic Manager存在操作系统命令注入漏洞，该漏洞源于OS命令注入点未对管理员输入进行充分过滤。攻击者可利用该漏洞以管理员身份执行任意操作系统命令，实现远程代码执行。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。",
  "patchName": "Ivanti Virtual Traffic Manager操作系统命令注入漏洞的补丁",
  "products": {
    "product": "Ivanti Virtual Traffic Manager <22.9r4"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-8051",
  "serverity": "高",
  "submitTime": "2026-05-18",
  "title": "Ivanti Virtual Traffic Manager操作系统命令注入漏洞"
}

View JSON API Download JSON

cnvd-2026-43368

Raw JSON Data