CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-107780 — Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains ...

·Source: NIST NVD

Updated:

Executive Summary

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows.

Analysis

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows. CVSS Score: 9.8. Published: 2026-10-08T21:17:52.940.

Indicators of Compromise (2)

SHA-1 (1)
003549ae5615bd114ba5bb8ddf6a8e8ead97c321
VirusTotalAnyRunJoe Sandbox
CVE (1)
CVE-2026-107780
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9869 — A stack-based buffer overflow vulnerability exists in the boa formTR069Config fu...

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9869
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9827 — A arbitrary file write vulnerability exists in the boa formUploadFile functional...

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9827
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9817 — A stack-based buffer overflow vulnerability exists in the boa formUploadFile fun...

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9817
NIST NVD