QNO Technology VPN Firewall OS Command Injection Vulnerability

Vulnerability

An OS command injection vulnerability has been identified in the VPN Firewall product by QNO Technology. This vulnerability allows authenticated remote attackers to inject arbitrary operating system commands, which are then executed on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the server, potentially allowing attackers to manipulate the system or access sensitive information.

Added: Dec 31, 2025, 9:21 AM
Updated: Dec 31, 2025, 9:21 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
5.2
remediation
0.0
relevance
1.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.