> CVE-2026-50880

« BACK_TO_HOME
PUBLISHED
2026-06-15 20:16
MODIFIED
2026-06-15 20:16
EPSS (Prob. Exploit)
0.48%
Top 58.8%
DATA SOURCES:
NVD 🔗 2026-06-15 FIRST EPSS 🔗 2026-11-01 GITHUB 🔗 2026-11-05

> DESCRIPTION

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-68mc-h6h8-79wj CRITICAL

YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

AFFECTED PACKAGES:
NPM / youtransfer
<= 1.0.6

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/06/2026 20:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://gist.github.com/pyuysig/4013f4f10f74b3fded7ddf41b6d36ae5
« BACK_TO_HOME