Beveiligingsadvies

CVE-2026-41315

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-14 18:31:09

Laatst bijgewerkt 2026-05-16 00:45:39

Toegewezen door GitHub_M

CVSS-score 9.3

Status PUBLISHED

Beschrijving

mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end unauthorized remote command execution vulnerability. Due to the lack of authentication on the /modify_crond and /start_task interfaces, it is possible to modify the default built-in scheduled tasks and start them, achieving RCE.

← Alle CVE's bekijken Bekijk op cve.org ↗