{"uuid": "a376cb12-4b17-4ac3-9fa9-c492b41e0ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108540", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxlib42red23", "content": "OpenSpug Spug 3.0 \u2013 4.0.1 affected by CRITICAL OS command injection (CVE-2026-108540). Remote exploit possible, code is public, no patch yet. Restrict access & monitor for vendor updates. https://radar.offseq.com/threat/cve-2026-108540-os-command-injection-in-openspug-spug-6b899c3d670ff1c9 #OffSe...", "creation_timestamp": "2026-10-11T07:30:28.273174Z"}