// CVE · PUBLISHED 2026-10-15
CVE-2026-105474 WebPros / SolusVM 2
9.4 · CVSS 4.0 Critical
Description A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products WebPros / SolusVM 2 Published 15 Oct 2026 Modified 16 Oct 2026 CVSS 9.4 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source support@hackerone.com CWE CWE-1336 Record status Deferred