OS
Product
osctrl
by jmpsec · last CVE Feb 26, 2026
2
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add osctrl to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28280
8.7
0%
Feb 26
`osctrl-admin` has Stored Cross-Site Scripting (XSS) in On-Demand Query List
Affected: < 0.5.0
CVE-2026-28279
8.4
1%
Feb 26
`osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration
Affected: < 0.5.0
Showing 2