Sicurezza
CVE of the day — CVE-2026-108540 (CVSS 9,9, critic)?Procedurally generated video from real data from official public sources. Backgrounds are abstract AI-generated images and the narration is a synthetic voice (TTS). No real event is filmed or altered.
Transcript
Frequently asked questions
CVE-2026-108540
CVE-2026-108540: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database.
Command injection
A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack..
Exposure and mitigation
Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.



