CVE-2026-82082
Received Received - Intake

OS Command Injection in NUMail

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: TWCERT/CC

Description
NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-82082
EUVD
EUVD-2026-67401

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
green-computing numail 202602162

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82082 is an OS Command Injection vulnerability in NUMail, a software developed by Green-Computing. It allows unauthenticated remote attackers to inject and execute arbitrary operating system commands on the server.

Detection Guidance

Detecting OS Command Injection vulnerabilities like CVE-2026-82082 typically involves inspecting network traffic for suspicious input patterns, such as semicolons, ampersands, or pipe symbols in user inputs. Check NUMail server logs for unusual command execution patterns or unexpected system calls. Use tools like Wireshark to monitor HTTP requests to NUMail endpoints for payloads containing command injection attempts.

Impact Analysis

This vulnerability can lead to complete server compromise. Attackers could steal data, install malware, disrupt services, or use the server for further attacks. Since it requires no authentication, any exposed instance is at immediate risk.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized access risks, potential data breaches, and lack of integrity controls. Organizations using vulnerable versions may face fines or penalties for non-compliance.

Mitigation Strategies

Immediately update NUMail to version 202602162 or later to apply the vendor patch. If updating is not immediately possible, restrict network access to the NUMail server using firewalls or network segmentation. Monitor server logs for signs of exploitation and consider disabling the affected service if not essential.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82082. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart