VULNERABILITY INTELLIGENCE

CVE-2019-17096

CVSS score9.8 CRITICAL

EPSS probability2.07%

CISA KEVNot currently listed

Published2020-01-27

Last modified2026-06-17

Description

A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.