CVE-2017-14535: Netfortris Trixbox

High severity, CVSS 8.8. EPSS: 50.1% chance of exploitation in the next 30 days.

trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.

Affected products

• Netfortris Trixbox: version 2.8.0.4 only

Published 2018-02-16. Last modified 2026-06-17.