Back to Security Advisories

SolusVM CVE-2026-105474

CVE-2026-105474 is a server-side template injection (CWE-1336) in SolusVM 2 up to version 2.0.0-44576 that lets a remote authenticated user execute arbitrary code as root. NVD rates it 9.4. Any SolusVM 2 master or node running an affected build should be updated past 2.0.0-44576 immediately.

Critical 9.4 CVSS
SolusVM

What this means under a SharedLicense license

An authenticated user — even a low-privilege one — gains root on the SolusVM infrastructure, which typically controls every VM on the cluster: the entire hosting estate behind one login.

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-105474

Frequently Asked Questions

What is CVE-2026-105474?
It is a server-side template injection in SolusVM 2 (CWE-1336) affecting versions up to 2.0.0-44576. A remote authenticated user can inject template payloads that execute arbitrary code as root. NVD rates it CVSS 9.4 — critical.
Who can exploit CVE-2026-105474?
Any user with an authenticated session on an affected SolusVM 2 installation. Given how widely SolusVM credentials circulate among resellers and clients, treat every account as a potential entry point.
How do I fix CVE-2026-105474?
Update SolusVM 2 to a build newer than 2.0.0-44576 via its standard update channel, then confirm the running version in the admin panel. Review admin and client accounts for unexpected activity in the meantime.
Is CVE-2026-105474 being exploited in the wild?
The NVD record does not list known exploited status. With a 9.4 score and root-level impact from an authenticated session, update affected builds urgently rather than waiting for exploitation reports.

References

Security Advisories

Related Advisories

WHMCS 9.1.0 Security Update

2026-10-22

Bind CVE-2026-94300

2026-10-22

EasyApache 4 25.91 — cPanel & WHM Update

2026-10-21

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System