CVE-2026-82082: Green-Computing｜NUMail - OS Command Injection

Published Aug 28, 2026

Updated

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

Affected Software

1 affected component

Green-Computing NUMail

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade NUMail (Green-Computing) to a version that resolves this vulnerability.
Fixed in 202602162Patch 202602162

Event History

Aug 28, 2026

CVE Published

via MITRE·03:12 AM

Data Sourced

via MITRE·03:12 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

Any remote attacker can exploit it without authentication. The attack requires network access to a vulnerable NUMail server.

What level of access could successful exploitation provide?

An attacker can inject and execute arbitrary operating-system commands on the affected server. The reported impact includes high confidentiality, integrity, and availability impact.