CVE-2022-28054: Vandyke Vshell

Critical severity, CVSS 9.8. EPSS: 31.9% chance of exploitation in the next 30 days.

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.

Affected products

• Vandyke Vshell: before 4.6.3 (fixed in 4.6.3)

Published 2022-05-02. Last modified 2026-06-17.