CVE-2020-14026: Ozeki NG Sms Gateway

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export.

Affected products

• Ozeki Ozeki NG Sms Gateway: up to and including 4.17.6

Published 2020-09-22. Last modified 2026-06-17.