CVE-2020-7628

—

CVSS 3.1

9.8 critical

EPSS

2%p77

Published

Apr 2, 2020 (Apr 2, 2020)

Modified

Jun 17, 2026

Description

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

Vendors: install-package project umount project
Products: install-package, umount
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.