← Back to CVE search

CVE-2026-9645

Unknown

Description

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

CVSS 9.9EPSS 0.316%Risk 1.02
View source
Published
2026-05-28 21:16:34
Affected versions
unknown
Type
Critical software
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H