VULNERABILITY INTELLIGENCE

CVE-2022-28054

CVSS score9.8 CRITICAL

EPSS probability31.89%

CISA KEVNot currently listed

Published2022-05-02

Last modified2026-06-17

Description

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.