[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 15:28 UTC
  • Importiert: 2026-08-26 15:51 UTC
  • Quelle-ID: full_disc
  • uid_hash: 1ca8a59b73b466a6621f5308494f5768fa30bb5cbf5cf65c9e53c40e349e4b4a
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in CFEngine Enterprise Nova Hub 3.27.1 (other

versions with the same generateScriptFromTemplates quoting are likely affected).

Type: Authenticated RCE (command injection via VCS settings, root) (CWE-78)

CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)

Impact: Authenticated admin-to-root full server takeover of the management hub that orchestrates the entire managed...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste