{"vulnerability": "cve-2026-2717", "sightings": [{"uuid": "c54d468b-697e-43dd-828d-2967fc2a463e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64fd24o42c", "content": "", "creation_timestamp": "2026-02-18T22:19:58.354676Z"}, {"uuid": "9686fbce-9ea9-46ce-ac4a-4e687759d07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27175", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf66nevy4q2o", "content": "", "creation_timestamp": "2026-02-18T23:00:16.636270Z"}, {"uuid": "d323b7d0-cf42-4d46-b1dc-9806c3e8c4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27175", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116094115117047754", "content": "", "creation_timestamp": "2026-02-18T23:00:28.592762Z"}, {"uuid": "9ab81c84-2b33-4a00-a670-18519449a526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6ag3prxe2c", "content": "", "creation_timestamp": "2026-02-18T23:31:59.578034Z"}, {"uuid": "58b237b7-b7c8-4755-8d7a-388fc858c684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27174", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf6bzhri252c", "content": "", "creation_timestamp": "2026-02-19T00:00:43.313487Z"}, {"uuid": "8bb2e578-9e5e-4d55-b48e-ff415d4aceec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27174", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116094352803760595", "content": "", "creation_timestamp": "2026-02-19T00:00:48.402049Z"}, {"uuid": "f965caff-1a3b-4a9f-81d3-d6a517b01690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6d3hjh5r26", "content": "", "creation_timestamp": "2026-02-19T00:19:44.096420Z"}, {"uuid": "c2f33528-6039-47b5-b88e-72d00d32597d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb", "content": "", "creation_timestamp": "2026-03-02T10:29:55.000000Z"}, {"uuid": "c49d743d-62fb-4dde-beb5-464532536485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_console_eval_rce.rb", "content": "", "creation_timestamp": "2026-03-02T10:29:55.000000Z"}, {"uuid": "a427dfbc-3be8-40de-9131-5a5a61c276cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27177", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfd7l6wpfa24", "content": "", "creation_timestamp": "2026-02-20T23:00:15.172845Z"}, {"uuid": "0b6d0b39-d385-4107-b2d7-103b25246dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfmf7ngpun2s", "content": "", "creation_timestamp": "2026-02-24T14:35:08.104735Z"}, {"uuid": "563a7406-4f84-4a6e-aa67-c585d43ad92d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5jwnkx2h", "content": "", "creation_timestamp": "2026-03-03T21:02:57.496427Z"}, {"uuid": "650f9a42-1975-4464-8ab8-35c0be6839cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5k3vfw2h", "content": "", "creation_timestamp": "2026-03-03T21:02:58.205709Z"}, {"uuid": "927a6552-93ea-4d2f-8e89-0c658f4e5027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27178", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfdgbrg5gv2m", "content": "", "creation_timestamp": "2026-02-21T01:00:15.159773Z"}, {"uuid": "6accfb3e-2ba0-4841-878f-b86b23989614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27170", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mflmvtyt2a2r", "content": "", "creation_timestamp": "2026-02-24T07:20:09.693786Z"}, {"uuid": "ab2b8e77-60e7-4a5a-89da-34852930a81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a1e531e5-4758-4a24-a2a3-885671a5cc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "ed7cbe2a-ee6b-4f42-837d-c3b290c17305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "9f0cfe50-6b86-4dfc-9614-09484bc4d1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27177", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "ff763eaa-6530-4c94-a781-4899bfe861fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "7a1924bc-f02b-4bd4-b81c-5aa824ef9f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "4c920c58-f89b-47b4-b5a2-da2b96338980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjfrbmlmau27", "content": "", "creation_timestamp": "2026-04-13T21:03:11.186578Z"}, {"uuid": "1e349a29-c36a-4127-b517-b4bf3f60f224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjsdlaztdn2c", "content": "", "creation_timestamp": "2026-04-18T21:02:35.333009Z"}, {"uuid": "bcf12b06-0775-434e-b3bf-bc63d9e651c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27174.yaml", "content": "", "creation_timestamp": "2026-04-20T02:11:49.000000Z"}, {"uuid": "84c524c0-884a-41eb-a72a-2256473b2dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2717", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mk7ieue4zx2x", "content": "", "creation_timestamp": "2026-04-24T02:33:05.658061Z"}, {"uuid": "93fcd7fc-3e0f-43f4-867f-e10fd7fbfbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2717", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mk7ieuuvli2p", "content": "", "creation_timestamp": "2026-04-24T02:33:08.278235Z"}, {"uuid": "7bf1d883-ac77-4138-860c-52a6d15d03c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/339", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-02-22T00:35:14.000000Z"}, {"uuid": "46f39953-70d8-41b7-9741-afeb59655052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/339", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-02-22T00:35:14.000000Z"}, {"uuid": "8210a55d-0436-4ad2-b505-3ef37b86f135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgab3vjum2u", "content": "", "creation_timestamp": "2026-04-26T18:56:27.573719Z"}, {"uuid": "f1ec11a4-2478-4063-a86c-be7af47c3b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-30T00:00:42.343003Z"}, {"uuid": "23b3b662-e8ad-4961-b53f-6f28e30642b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27176", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27176.yaml", "content": "", "creation_timestamp": "2026-05-04T09:16:43.000000Z"}, {"uuid": "d42e4b83-6249-45ff-91d2-4fecdbc239e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlbfrmevck2n", "content": "Critical RCE vulnerability (CVE-2026-27174) found in MajorDoMo smart home platform. Immediate action required to secure systems. #CyberSecurity #SmartHome #IoT #MajorDoMo #RCE Link: thedailytechfeed.com/critical-rce...", "creation_timestamp": "2026-05-07T14:17:03.879411Z"}, {"uuid": "1eadffeb-60a5-4fe6-a7b3-2e7a3bd51a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mma3yjr42d2s", "content": "CVE-2026-27173: Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-19T19:14:29.977100Z"}, {"uuid": "3d3c1913-114e-4e1b-a1b5-2e8a11e7ab67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmafattt2v2s", "content": "\ud83d\udfe0 CVE-2026-27173 - High (8.7)\n\nJWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27173/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T22:00:28.664295Z"}, {"uuid": "20d7c860-e32a-4b4b-8c3a-e872676c96f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmaodrigja2c", "content": "CVE-2026-27173 - Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments\nCVE ID : CVE-2026-27173\n \n Published : May 19, 2026, 8:16 p.m. | 4\u00a0hours, 5\u00a0minutes ago\n \n Description : JWT tokens that were used by workers in Kubernetes...", "creation_timestamp": "2026-05-20T00:42:54.425517Z"}, {"uuid": "edeea256-5919-4e0f-921c-fe279f736de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmav65d56325", "content": "Kubernetes Executor\u3067JWT\u30c8\u30fc\u30af\u30f3\u304c\u6f0f\u6d29\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30e6\u30fc\u30b6\u30fc\u304c\u30bf\u30b9\u30afSDK\u7d4c\u7531\u3067\u64cd\u4f5c\u3084Airflow DB\u6539\u5909\u3092\u53ef\u80fd\u306b\u3059\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-27173 CVSS 8.7 | HIGH", "creation_timestamp": "2026-05-20T02:45:01.846989Z"}, {"uuid": "d1345ddd-5012-4536-a172-ccd220e855b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116605541038752223", "content": "A lot of offensive activities were identified targeting Apache Airflow CNCF Kubernetes Provider (CVE-2026-27173) https://vuldb.com/vuln/364721/cti", "creation_timestamp": "2026-05-20T06:42:41.818861Z"}, {"uuid": "fa581e07-0968-4ded-a77d-fc58ae596576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-29T20:00:16.286450Z"}, {"uuid": "2fdf584b-b72f-4489-8a36-6dabda16db53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzqgbc362k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27173: \u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 JWT-\u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0432 Kubernetes Executors\n\n\n\nhttps://kripta.biz/posts/2CA92F44-FA4F-4D24-AB68-CAA6EDF24266", "creation_timestamp": "2026-07-03T07:32:20.803272Z"}, {"uuid": "b1d54aaf-5586-43af-82c3-17977ec7cd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.543307Z"}, {"uuid": "6237cbf4-9e51-4e49-a8f0-31a9257a6f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.920903Z"}, {"uuid": "762a1ead-fcb8-43ce-b6de-8e2eb5bde764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/bdufstecru/3295", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 ConsulRegistryUtils.deserialize \u043a\u043b\u0430\u0441\u0441\u0430 ConsulRegistry java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Apache Camel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09300\nCVE-2026-27172\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://camel.apache.org/security/CVE-2026-27172.html", "creation_timestamp": "2026-07-14T01:00:04.418681Z"}, {"uuid": "fccf47d3-0098-4e21-bea2-97fcdc56dc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/bdufstecru/3295", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 ConsulRegistryUtils.deserialize \u043a\u043b\u0430\u0441\u0441\u0430 ConsulRegistry java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Apache Camel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09300\nCVE-2026-27172\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://camel.apache.org/security/CVE-2026-27172.html", "creation_timestamp": "2026-07-15T00:00:35.533802Z"}, {"uuid": "51aeea7b-1f6c-4691-bcde-f65e0b39dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.287902Z"}, {"uuid": "810e1033-a8b9-409b-8ddf-b72615335d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-16T19:00:20.641961Z"}, {"uuid": "4fc67aeb-611c-4f17-a4f3-9492e1cfc51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-17T00:00:37.049483Z"}, {"uuid": "679fe5fc-7e06-4424-91b2-32c7c7cdc0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-18T00:00:23.478479Z"}, {"uuid": "ccf24431-adb8-4fab-bf73-bd67cb21c0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/441", "content": "CVE-2026-27172", "creation_timestamp": "2026-08-28T00:00:37.188126Z"}, {"uuid": "fa88824c-a2be-4219-bc4b-22c2c3ea52c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/cve0day/441", "content": "CVE-2026-27172", "creation_timestamp": "2026-08-27T15:00:06.339859Z"}, {"uuid": "d39d3062-cc4e-40a0-8601-0ebd47da200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0254", "content": "Oracle heeft 158 kwetsbaarheden verholpen in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQL Developer en TimesTen In-Memory Database.\n\nVan deze kwetsbaarheden zijn 91 kwetsbaarheden afkomstig van third-party producten waarvoor eerder al updates zijn verschenen welke nu door Oracle zijn verwerkt, of betreffen kwetsbaarheden welke niet kunnen leiden tot exploitatie, omdat zij zich bevinden in delen van de producten die niet toegankelijk zijn. De zes ernstigste kwetsbaarheden hebben een CVSS score van 9 en hoger gekregen.\n\nDe kwetsbaarheid in Eclipse Jetty's HTTP/1.1 parser, gebruikt in Oracle REST Data Services versies 24.2.0 tot 26.1.0, betreft incorrecte parsing van chunked transfer encoding extensies met ongesloten gequoteerde strings, waardoor HTTP request smuggling mogelijk is. Dit kan leiden tot cache poisoning, bypass van toegangscontrole, session hijacking en ongeautoriseerde toegang tot endpoints. \n\nPerl versies vanaf 5.9.4 tot 5.43.9 bevatten een kwetsbare Compress::Raw::Zlib module door een verouderde zlib bibliotheek met meerdere beveiligingsproblemen, waaronder CVE-2026-3381 en CVE-2026-27171. Deze kwetsbaarheid is relevant voor Perl distributies die vaak worden ingezet in Red Hat Enterprise Linux en OpenShift Container Platform omgevingen.\n\nApache Kafka versies 4.1.0 en 4.1.1 bevatten een kwetsbaarheid in de JWT token validatie waarbij de standaard validator elke JWT token accepteert zonder correcte validatie, wat ongeautoriseerde toegang kan toestaan. Dit is opgelost door de validator expliciet in te stellen of te upgraden naar versie 4.1.2 of hoger. Oracle Communications Unified Assurance Message Bus componenten versies 6.1.1 tot 7.0.0, die Apache Kafka gebruiken, bevatten een kwetsbaarheid die ongeauthenticeerde netwerkaanvallers in staat stelt ongeautoriseerde toegang te verkrijgen en kritieke data te wijzigen.\n\nOracle Net Services versies 19.3 tot 19.31, 21.3 tot 21.22 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid die ongeauthenticeerde netwerktoegang mogelijk maakt om gevoelige informatie te verkrijgen of een denial of service te veroorzaken.\n\nOracle TimesTen In-Memory Database versie 26.1.1.1.0 bevat een kwetsbaarheid in de Kubernetes Operator component die een aanvaller met lage privileges en netwerktoegang via HTTPS in staat stelt volledige controle over de database instance te verkrijgen.\n\nOracle Database Server RDBMS componenten versies 19.3 tot 19.31 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid waarbij een aanvaller met lage privileges en Execute DBMS_CLOUD rechten en netwerktoegang volledige controle over de RDBMS kan verkrijgen.\n\nHet voert te ver om de overige 152 kwetsbaarheden in detail te beschrijven in deze advisory en het NCSC verwijst dan ook naar de bijgevoegde referentie.", "creation_timestamp": "2026-07-22T16:00:54.255845Z"}, {"uuid": "d0c4ab3c-d360-4eee-b75f-2f1398585305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0254", "content": "Oracle heeft 158 kwetsbaarheden verholpen in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQL Developer en TimesTen In-Memory Database.\n\nVan deze kwetsbaarheden zijn 91 kwetsbaarheden afkomstig van third-party producten waarvoor eerder al updates zijn verschenen welke nu door Oracle zijn verwerkt, of betreffen kwetsbaarheden welke niet kunnen leiden tot exploitatie, omdat zij zich bevinden in delen van de producten die niet toegankelijk zijn. De zes ernstigste kwetsbaarheden hebben een CVSS score van 9 en hoger gekregen.\n\nDe kwetsbaarheid in Eclipse Jetty's HTTP/1.1 parser, gebruikt in Oracle REST Data Services versies 24.2.0 tot 26.1.0, betreft incorrecte parsing van chunked transfer encoding extensies met ongesloten gequoteerde strings, waardoor HTTP request smuggling mogelijk is. Dit kan leiden tot cache poisoning, bypass van toegangscontrole, session hijacking en ongeautoriseerde toegang tot endpoints. \n\nPerl versies vanaf 5.9.4 tot 5.43.9 bevatten een kwetsbare Compress::Raw::Zlib module door een verouderde zlib bibliotheek met meerdere beveiligingsproblemen, waaronder CVE-2026-3381 en CVE-2026-27171. Deze kwetsbaarheid is relevant voor Perl distributies die vaak worden ingezet in Red Hat Enterprise Linux en OpenShift Container Platform omgevingen.\n\nApache Kafka versies 4.1.0 en 4.1.1 bevatten een kwetsbaarheid in de JWT token validatie waarbij de standaard validator elke JWT token accepteert zonder correcte validatie, wat ongeautoriseerde toegang kan toestaan. Dit is opgelost door de validator expliciet in te stellen of te upgraden naar versie 4.1.2 of hoger. Oracle Communications Unified Assurance Message Bus componenten versies 6.1.1 tot 7.0.0, die Apache Kafka gebruiken, bevatten een kwetsbaarheid die ongeauthenticeerde netwerkaanvallers in staat stelt ongeautoriseerde toegang te verkrijgen en kritieke data te wijzigen.\n\nOracle Net Services versies 19.3 tot 19.31, 21.3 tot 21.22 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid die ongeauthenticeerde netwerktoegang mogelijk maakt om gevoelige informatie te verkrijgen of een denial of service te veroorzaken.\n\nOracle TimesTen In-Memory Database versie 26.1.1.1.0 bevat een kwetsbaarheid in de Kubernetes Operator component die een aanvaller met lage privileges en netwerktoegang via HTTPS in staat stelt volledige controle over de database instance te verkrijgen.\n\nOracle Database Server RDBMS componenten versies 19.3 tot 19.31 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid waarbij een aanvaller met lage privileges en Execute DBMS_CLOUD rechten en netwerktoegang volledige controle over de RDBMS kan verkrijgen.\n\nHet voert te ver om de overige 152 kwetsbaarheden in detail te beschrijven in deze advisory en het NCSC verwijst dan ook naar de bijgevoegde referentie.", "creation_timestamp": "2026-07-23T01:00:40.370119Z"}, {"uuid": "78b67810-3d5e-4bf3-9b19-8a8d89b684e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-31T00:00:36.454648Z"}, {"uuid": "291d5216-54f4-49df-a068-8ac0cffaa65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-01T13:00:05.887080Z"}, {"uuid": "768a1f88-48d4-4b50-8685-cf35eb42b2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-01T13:00:05.973485Z"}, {"uuid": "823ed337-985b-457b-8f22-e74506a486b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-02T01:05:06.579399Z"}, {"uuid": "add9f4dc-57b3-453f-8096-b596c403f005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-02T01:05:06.529519Z"}, {"uuid": "b58a91b8-8131-4748-ba90-9d0ffac3b201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection vulnerability in MajorDoMo's\\n          remote command handler (rc/index.php). The param parameter is interpolated into double\\n          quotes without escapeshellarg(), and the resulting string is passed to safe_exec() which\\n          inserts it into the safe_execs database table with no sanitization.\\n\\n          The cycle_execs.php worker script is web-accessible without authentication. On startup it\\n          purges the safe_execs queue, then enters an infinite loop polling the table every second\\n          and passing each command to exec(). A race condition is required: the worker must be\\n          started first (which purges existing entries), then the injection is performed while the\\n          worker is polling. The next iteration picks up and executes the attacker's payload.\\n\\n          The command parameter must reference a valid .bat file in rc/commands/. The default\\n          MajorDoMo installation ships with shutdown.bat, displayon.bat, and displayoff.bat.\\n\\n          All versions of MajorDoMo up to and including the latest release are affected.\\n          The fix is tracked in PR sergejey/majordomo#1177.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/multi/http/majordomo_cmd_injection_rce\", \"is_install_path\": true, \"mod_time\": \"2026-02-27 14:42:00 +0000\", \"name\": \"MajorDoMo Remote Command Injection via cycle_execs Race Condition\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/majordomo_cmd_injection_rce\", \"references\": [\"CVE-2026-27175\", \"URL-https://chocapikk.com/posts/2026/majordomo-revisited/\", \"URL-https://github.com/sergejey/majordomo/pull/1177\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.192012Z"}, {"uuid": "67fc4df5-32d9-4009-bcae-31fc2f01a04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_console_eval_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability in\\n          MajorDoMo, an open-source home automation platform. The admin panel's PHP console\\n          is accessible without authentication due to a missing exit after redirect in\\n          modules/panel.class.php. The redirect(\\\"/\\\") call intended to block unauthenticated\\n          users lacks an exit statement, so execution continues into the ajax panel handler\\n          which includes inc_panel_ajax.php unconditionally. Inside, the console handler\\n          passes the user-supplied command parameter directly to eval() via the evalConsole()\\n          function. The command, ajax_panel, and op parameters are all controllable via GET\\n          request through MajorDoMo's register_globals-style gr() function.\\n\\n          This results in unauthenticated PHP code evaluation via a single GET request\\n          to /admin.php.\\n\\n          All versions of MajorDoMo up to and including the latest release are affected.\\n          The fix is tracked in PR sergejey/majordomo#1177.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/multi/http/majordomo_console_eval_rce\", \"is_install_path\": true, \"mod_time\": \"2026-02-21 08:34:31 +0000\", \"name\": \"MajorDoMo Console Eval Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/majordomo_console_eval_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/majordomo_console_eval_rce\", \"references\": [\"CVE-2026-27174\", \"URL-https://chocapikk.com/posts/2026/majordomo-revisited/\", \"URL-https://github.com/sergejey/majordomo/pull/1177\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.285307Z"}]}