CVE-2026-110392: Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning
Published Oct 14, 2026
·Updated
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.
Affected Software
1 affected component
Samsung QA-Board
Event History
Oct 14, 2026
CVE Published
via MITRE·01:35 AM
Data Sourced
via MITRE·01:35 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
No privileges or user interaction are required. The listed vector is network-accessible with low attack complexity.
2
What could a successful exploit allow?
Successful exploitation can result in OS command injection. The vulnerability is rated as having high impact on confidentiality, integrity, and availability.
3
Which component should be investigated for exposure?
Investigate Samsung Open Source QA-Board deployments, particularly functionality related to output redo or tuning. The provided data does not identify affected versions or configuration prerequisites.