Vfs vulnerabilities

CVEs whose affected-version data names the Vfs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-60102High· 8.8

4mo ago

Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver

Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated a…

▾ Twilighthorde · VfsEPSS 3.3%via CVEORG