[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 07:42 UTC
Importiert: 2026-10-15 09:17 UTC
Quelle-ID: full_disc
uid_hash: 826733d77a3e91a350c92ec9936e646f26cc32646814f894dfc9ca98360dadf8

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability chain in

Abyss Web Server X1 2.16.22.0, the free edition of the closed-source Abyss

web server from Aprelium (Tunisia), a product family that has shipped for

more than twenty years. The release artefacts identify 2.16.22.0 as the

vendor's current official release. Between first start and the moment an

administrator sets a console password, any client admitted by the shipped...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss