CVE-2026-107459: Openfind Secushare Pro

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

Affected products

• Openfind Secushare Pro: version 4 only

Published 2026-10-08. Last modified 2026-10-08.