Security Advisory
CVE-2026-12195
N/A
UNKNOWN
Vulnerability Description
myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleting FTP usernames. This could result in the execution of commands as the admin user or takevoer of the admin user in myVesta.
Published Date
July 4, 2026
Official Source
NIST NVD Advisory