Openspug - Spug - CRITICAL - CVE-2026-108540. A vulnerability has been identified in the File Transfer component of OpenSpug, specifically affecting versions 3.4.0 and 4.0.1. This flaw allows remote execution of unauthorized OS commands through the manipulation of the /exec/transfer file. Due to the nature of the exploit, attackers can potentially gain control over the underlying operating system, posing significant risks to system integrity and security. Despite early notification to the vendor regarding this issue, no response has been received, leaving the affected systems exposed to potential exploitation. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io