CVE-2026-46746

The flaw

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injection of shell command payloads via crafted d

What to do

Review advisory and patch per vendor guidance.

References