CVE-2022-24262: Voipmonitor

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

Affected products

• Voipmonitor Voipmonitor: before 24.96 (fixed in 24.96)

Published 2022-02-04. Last modified 2026-06-17.