VULNERABILITY INTELLIGENCE

CVE-2023-26322

CVSS score8.8 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2024-08-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references