VULNERABILITY INTELLIGENCE

CVE-2026-9645

CVSS score9.9 CRITICAL
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-08-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

Weakness classification

  • vulnreport@tenable.com: CWE-78

Primary references