SolusVM CVE-2026-105474

CVE-2026-105474 is a server-side template injection (CWE-1336) in SolusVM 2 up to version 2.0.0-44576 that lets a remote authenticated user execute arbitrary code as root. NVD rates it 9.4. Any SolusVM 2 master or node running an affected build should be updated past 2.0.0-44576 immediately.

Critical 9.4 CVSS 2026-10-15 00:00:00

SolusVM

SharedLicense लाइसेंस के तहत इसका अर्थ

An authenticated user — even a low-privilege one — gains root on the SolusVM infrastructure, which typically controls every VM on the cluster: the entire hosting estate behind one login.

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-105474

अक्सर पूछे जाने वाले प्रश्न

What is CVE-2026-105474?

It is a server-side template injection in SolusVM 2 (CWE-1336) affecting versions up to 2.0.0-44576. A remote authenticated user can inject template payloads that execute arbitrary code as root. NVD rates it CVSS 9.4 — critical.

Who can exploit CVE-2026-105474?

Any user with an authenticated session on an affected SolusVM 2 installation. Given how widely SolusVM credentials circulate among resellers and clients, treat every account as a potential entry point.

How do I fix CVE-2026-105474?

Update SolusVM 2 to a build newer than 2.0.0-44576 via its standard update channel, then confirm the running version in the admin panel. Review admin and client accounts for unexpected activity in the meantime.

Is CVE-2026-105474 being exploited in the wild?

The NVD record does not list known exploited status. With a 9.4 score and root-level impact from an authenticated session, update affected builds urgently rather than waiting for exploitation reports.

संदर्भ

NVD — CVE-2026-105474

सुरक्षा सलाह

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें

अक्सर पूछे जाने वाले प्रश्न

संबंधित सलाह

अपने सिस्टम में भेद्यताओं की जाँच करें