📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global vulnerability Higher Education CRITICAL 7h Global data_breach Government HIGH 8h Global supply_chain Software Development and Open Source Communities CRITICAL 8h Global malware Software Development CRITICAL 8h Global phishing Multiple Sectors HIGH 9h Global vulnerability Web Applications CRITICAL 9h Global apt Critical Infrastructure CRITICAL 9h Global ransomware Multiple sectors CRITICAL 10h Global supply_chain Software Development, IT Infrastructure, Technology CRITICAL 10h Global vulnerability,data_breach,general Technology, Industrial Control Systems, Telecommunications HIGH 11h Global vulnerability Higher Education CRITICAL 7h Global data_breach Government HIGH 8h Global supply_chain Software Development and Open Source Communities CRITICAL 8h Global malware Software Development CRITICAL 8h Global phishing Multiple Sectors HIGH 9h Global vulnerability Web Applications CRITICAL 9h Global apt Critical Infrastructure CRITICAL 9h Global ransomware Multiple sectors CRITICAL 10h Global supply_chain Software Development, IT Infrastructure, Technology CRITICAL 10h Global vulnerability,data_breach,general Technology, Industrial Control Systems, Telecommunications HIGH 11h Global vulnerability Higher Education CRITICAL 7h Global data_breach Government HIGH 8h Global supply_chain Software Development and Open Source Communities CRITICAL 8h Global malware Software Development CRITICAL 8h Global phishing Multiple Sectors HIGH 9h Global vulnerability Web Applications CRITICAL 9h Global apt Critical Infrastructure CRITICAL 9h Global ransomware Multiple sectors CRITICAL 10h Global supply_chain Software Development, IT Infrastructure, Technology CRITICAL 10h Global vulnerability,data_breach,general Technology, Industrial Control Systems, Telecommunications HIGH 11h
Vulnerabilities

CVE-2026-2952

High ⚡ Exploit Available
A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxarg
CWE-77 — Weakness Type
Published: Feb 22, 2026  ·  Modified: Feb 28, 2026  ·  Source: NVD
CVSS v3
7.3
🔗 NVD Official
📄 Description (English)

A flaw has been found in Vaelsys 4.1.0. This vulnerability affects unknown code of the file /tree/tree_server.php of the component HTTP POST Request Handler. This manipulation of the argument xajaxargs causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

🤖 AI Executive Summary

Vaelsys 4.1.0 contains an OS command injection vulnerability in the HTTP POST request handler via the xajaxargs parameter, allowing remote attackers to execute arbitrary commands. The vulnerability affects the /tree/tree_server.php file and has a published exploit with no vendor response.

📄 Description (Arabic)

تحتوي نسخة Vaelsys 4.1.0 على ثغرة خطيرة في معالج طلبات HTTP POST حيث يمكن للمهاجمين حقن أوامر نظام التشغيل من خلال معامل xajaxargs غير المحقق من صحته. يمكن استغلال هذه الثغرة عن بعد دون الحاجة إلى مصادقة، مما يسمح بتنفيذ أوامر تعسفية بصلاحيات تطبيق الويب.

🤖 ملخص تنفيذي (AI)

يحتوي Vaelsys 4.1.0 على ثغرة حقن أوامر نظام التشغيل في معالج طلبات HTTP POST عبر معامل xajaxargs، مما يسمح للمهاجمين البعيدين بتنفيذ أوامر تعسفية. تؤثر الثغرة على ملف /tree/tree_server.php ويوجد استغلال منشور بدون رد من البائع.

🤖 AI Intelligence Analysis Analyzed: May 5, 2026 02:32
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: high
🏢 Affected Saudi Sectors
banking government healthcare
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
8.0
/ 10.0
🔧 Remediation Steps (English)
Immediately upgrade Vaelsys to a patched version if available. If no patch exists, disable or restrict access to the /tree/tree_server.php endpoint using web application firewall rules. Implement input validation and sanitization for the xajaxargs parameter. Monitor for suspicious POST requests containing command injection payloads. Consider implementing Web Application Firewall (WAF) rules to block OS command injection attempts.
🔧 خطوات المعالجة (العربية)
قم بالترقية الفورية إلى نسخة معالجة من Vaelsys إن توفرت. إذا لم تكن هناك رقعة، قم بتعطيل أو تقييد الوصول إلى نقطة النهاية /tree/tree_server.php باستخدام قواعد جدار حماية تطبيقات الويب. تطبيق التحقق من صحة المدخلات والتطهير لمعامل xajaxargs. مراقبة طلبات POST المريبة التي تحتوي على حمولات حقن الأوامر. فكر في تطبيق قواعد جدار حماية تطبيقات الويب (WAF) لحظر محاولات حقن أوامر نظام التشغيل.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
A.7.1.1 A.7.1.2 A.12.2.1 A.12.6.1
🔵 SAMA CSF
ID.BE-1 PR.AC-1 PR.AC-3 DE.CM-1
🟡 ISO 27001:2022
A.6.1.1 A.13.1.1 A.13.1.3 A.14.2.1
📦 Affected Products / CPE 1 entries
vaelsys:vaelsys:4.1.0
📊 CVSS Score
7.3
/ 10.0 — High
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredN — None / Network
User InteractionN — None / Network
ScopeU — Unchanged
ConfidentialityL — Low / Local
IntegrityL — Low / Local
AvailabilityL — Low / Local
📋 Quick Facts
Severity High
CVSS Score7.3
CWECWE-77
EPSS0.28%
Exploit ✓ Yes
Patch ✓ Yes
Published 2026-02-22
Source Feed nvd
Views 5
🇸🇦 Saudi Risk Score
8.0
/ 10.0 — Saudi Risk
Priority: HIGH
🏷️ Tags
exploit-available CWE-77
Share this CVE

💬 Comments

0
Loading comments
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.