OpenSpug Spug

• CVE-2026-108540 Critical 9.9 OpenSpug File Transfer transfer os command injection 1.7%
• CVE-2026-90770 High 8.8 Spug through 3.4.0 Remote Code Execution via ping_check 1.3%