SolusVM
by SolusVM
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-105474 | Cri | 0.61 | — | 0.00 | Oct 15, 2026 | A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root. | ||
| CVE-2026-68491 | Cri | 0.61 | — | 0.00 | Sep 15, 2026 | An insufficient check allowed for the overwrite of arbitrary files via a symlink. | ||
| CVE-2022-42175 | Hig | 0.57 | 8.8 | 0.01 | Jul 5, 2023 | Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization. |
- risk 0.61cvss —epss 0.00
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
- risk 0.61cvss —epss 0.00
An insufficient check allowed for the overwrite of arbitrary files via a symlink.
- risk 0.57cvss 8.8epss 0.01
Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization.