CVE-2026-10550 | elunez eladmin up to 2.7 Application Deployment App.java uploadPath command injection (Issue 899)

A vulnerability was found in elunez eladmin up to 2.7. It has been classified as critical. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection.

This vulnerability is registered as CVE-2026-10550. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.