CVE-2026-96349

Summary

This vulnerability allows unauthenticated attackers to execute arbitrary code on affected SiteSkite <= 2.1.8 instances, leading to full compromise of the system.

Exploitability

Exploitation is straightforward as no authentication is required, and the flaw allows for remote code execution.

Blast radius

If exploited, this could result in complete control of the affected SiteSkite instance, potentially leading to data theft, service disruption, or further attacks on the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to SiteSkite 2.1.9 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.