THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-49481 (CRITICAL 9.6) — UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-controlled values can be in

[NVD] CVE-2026-49481 (CRITICAL 9.6) — UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-controlled values can be in

lownvdPublished 2026-08-12

CVE-2026-49481 CVSS: 9.6 CRITICAL Published: 2026-08-12T23:17:21.363

UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-controlled values can be inserted into the wake_cmd and shutdown_cmd template

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-49481