CVE-2026-2544

Medium CVSS: 6.9

A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-02-16 08:16:05

Güncelleme

2026-02-18 17:52:22

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-77 MEDIUM 2026

Referanslar

https://github.com/lakshayyverma/CVE-Discovery/blob/main/lulu.md https://vuldb.com/?ctiid.346153 https://vuldb.com/?id.346153 https://vuldb.com/?submit.749722