Authenticated code execution via creation payload injection

Command injection in Logpoint Universal Normalizer before 5.7.0 allows remote authenticated users to execute code via crafted creation payloads. The creation workflow accepts injected payloads and executes them, although the vendor does not identify the affected parameter or code path. A valid low-privilege account and adjacent-network access are required; successful exploitation runs attacker-supplied code with the service's privileges.