CVE-2018-14772: Pydio

High severity, CVSS 7.2. EPSS: 6.2% chance of exploitation in the next 30 days.

Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection.

Affected products

• Pydio Pydio: from 4.2.1, up to and including 8.2.1

Published 2018-10-16. Last modified 2026-06-17.