Вернуться к предупреждениям о безопасности

SolusVM CVE-2026-105474

CVE-2026-105474 is a server-side template injection (CWE-1336) in SolusVM 2 up to version 2.0.0-44576 that lets a remote authenticated user execute arbitrary code as root. NVD rates it 9.4. Any SolusVM 2 master or node running an affected build should be updated past 2.0.0-44576 immediately.

Critical 9.4 CVSS
SolusVM

Что это значит по лицензии SharedLicense

An authenticated user — even a low-privilege one — gains root on the SolusVM infrastructure, which typically controls every VM on the cluster: the entire hosting estate behind one login.

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-105474

Часто задаваемые вопросы

What is CVE-2026-105474?
It is a server-side template injection in SolusVM 2 (CWE-1336) affecting versions up to 2.0.0-44576. A remote authenticated user can inject template payloads that execute arbitrary code as root. NVD rates it CVSS 9.4 — critical.
Who can exploit CVE-2026-105474?
Any user with an authenticated session on an affected SolusVM 2 installation. Given how widely SolusVM credentials circulate among resellers and clients, treat every account as a potential entry point.
How do I fix CVE-2026-105474?
Update SolusVM 2 to a build newer than 2.0.0-44576 via its standard update channel, then confirm the running version in the admin panel. Review admin and client accounts for unexpected activity in the meantime.
Is CVE-2026-105474 being exploited in the wild?
The NVD record does not list known exploited status. With a 9.4 score and root-level impact from an authenticated session, update affected builds urgently rather than waiting for exploitation reports.

Источники

Предупреждения о безопасности

Похожие предупреждения

Linux Kernel (FIPS) Vulnerabilities — Ubuntu Security Update (USN-9027-2)

2026-11-13

Linux Kernel (NVIDIA Tegra) Vulnerabilities — Ubuntu Security Update (USN-9091-1)

2026-11-13

Linux Kernel (HWE) Vulnerabilities — Ubuntu Security Update (USN-9018-2)

2026-11-12

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему