VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 15, 2026

CVE-2026-89040

CVE-2026-89040

Description

Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Tencent/Msecreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.