Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2026-5965 — CVSS 9.8/10 ██████████ NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/KXgGSaHqr5
Post summary
A disclosure of CVE-2026-5965, an unauthenticated local OS command injection in NewSoftOA with high CVSS score; a patch is now available.
CVE-2026-5965 NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on t… https://www.cve.org/CVERecord?id=CVE-2026-5965
Post summary
The post announces CVE-2026-5965, an OS Command Injection flaw in NewSoftOA that permits unauthenticated local attackers to execute arbitrary commands.
🚨 CVE-2026-5965: NewSo... Unauthenticated RCE with 9.3 CVSS on enterprise OA systems - perfect pivot point for lateral movement in corporate networks. #RCE #CommandInjection. https://zerodaysignal.com/vulnerability/CVE-2026-5965 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A new high‑severity, unauthenticated RCE (CVE‑2026‑5965) is announced, with a link to the vulnerability details but no exploit code, active exploitation, or patch information provided.