CVE-2026-42696

Summary

A remote code execution vulnerability in SiteVault allows attackers to execute arbitrary code on the target system without authentication. This critical flaw affects versions up to 1.5.19 and could lead to full system compromise.

Exploitability

The exploit is highly practical with no authentication required, making it extremely easy to trigger from any network location with access to the vulnerable endpoint.

Blast radius

The vulnerability could impact any website using SiteVault's backup, restore, migration, or cloning features, potentially leading to complete system takeover and data exfiltration across multiple affected installations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.5.20 or later to remediate this critical RCE vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.