← Back to search

CVE-2026-93698

9.9 CRITICAL

Published 2026-10-02 · Updated 2026-10-02

AI risk analysis

Summary
This flaw allows arbitrary commands to be executed via the Multilang adminbin due to insufficient validation, posing a critical risk.
Exploitability
Exploitation is relatively straightforward given the lack of validation, requiring an attacker to craft and send malicious input.
Blast radius
If exploited, this flaw could lead to complete system compromise and potential data loss or manipulation.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the Multilang adminbin feature or restrict access to it strictly.
rceadminwebvalidation

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-78

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.