CVE-2026-82082: Green-Computing｜NUMail - OS Command Injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-08-28
Weakness: CWE-78

Description

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

Affected products

Green-Computing NUMail: all versions

References

https://www.twcert.org.tw/en/cp-139-11145-5361d-2.html
https://www.twcert.org.tw/tw/cp-132-11144-45c6a-1.html

Get alerted when CVE-2026-82082 or the next vulnerability affects your stack