CVE-2026-113403: ArmorX Global Technology｜ArmorX Spam - Command Injection

Published Oct 20, 2026

Updated

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server.

Affected Software

1 affected component

ArmorX Global Technology ArmorX Spam

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ArmorX Spam to a version that resolves this vulnerability.
Fixed in 8.15.2-3.282.133-1.90.061

Event History

Oct 20, 2026

CVE Published

via MITRE·07:04 AM

Data Sourced

via MITRE·07:04 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require user interaction?

No. The CVSS vector indicates no user interaction is required.

What security impact is indicated beyond code upload capability?

The CVSS vector indicates high integrity impact, with no indicated confidentiality or availability impact.

Does the vulnerability affect resources outside the vulnerable product's security scope?

No. The CVSS vector indicates that scope is unchanged.