{
  "title": "CVE of the day — CVE-2026-108540 (CVSS 9,9, critic)",
  "title_variants": [
    {
      "id": "v0",
      "title": "CVE of the day — CVE-2026-108540 (CVSS 9,9, critic)"
    },
    {
      "id": "v1",
      "title": "CVE-2026-108540: critical vulnerability, CVSS 9,9/10, command injection type, exploitable"
    }
  ],
  "description": "CVE-2026-108540: critical vulnerability, CVSS 9,9/10, command injection type, exploitable remotely, with low privileges, without user interaction. A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer..",
  "keywords": [
    "c",
    "cve-2026-108540",
    "vulnerability",
    "critical vulnerability",
    "cwe-77",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "scenes": [
    {
      "title": "CVE-2026-108540",
      "subtitle": "CVSS 9,9",
      "text": "CVE-2026-108540: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "title": "Command injection",
      "subtitle": "command injection · CVSS v3.1",
      "text": "A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack.."
    },
    {
      "title": "EXPOSURE AND MITIGATION",
      "subtitle": "remotely exploitable, with low privileges, without user interaction",
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ],
  "publication_date": "2026-10-13T01:03:12.139Z",
  "duration": 20,
  "topic": "cve",
  "lang": "en",
  "translation_group": "cve-2026-10-13",
  "poster": "cve-2026-10-13-en.jpg",
  "preview": "cve-2026-10-13-en.gif",
  "og_card": "cve-2026-10-13-en.og.jpg",
  "audiogram": "cve-2026-10-13-en.audiogram.mp4",
  "captions": "cve-2026-10-13-en.vtt",
  "generation": {
    "procedural": true,
    "ai_generated": [
      "background",
      "voice"
    ],
    "real_data_source": "official public API",
    "filmed_real_event": false,
    "disclosure": "Procedurally generated from real public-source data; abstract AI-generated backgrounds; synthetic (TTS) voice. No real event is filmed or altered."
  },
  "transcript_text": "CVE-2026-108540: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database. A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack.. Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "transcript": [
    {
      "start": 0,
      "end": 6.667,
      "text": "CVE-2026-108540: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "start": 6.667,
      "end": 13.333,
      "text": "A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack.."
    },
    {
      "start": 13.333,
      "end": 20,
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ]
}