VULNERABILITY INTELLIGENCE

CVE-2022-28927

CVSS score9.8 CRITICAL

EPSS probability34.40%

CISA KEVNot currently listed

Published2022-05-19

Last modified2026-06-17

Description

A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url parameters.