Dashboard / CVE-2026-27760

CVE-2026-27760

CRITICAL
HIGH Priority: 3.03 BB Relevance: 85/100
Published: 2026-04-28 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
AT: None
VC: High
VI: High
VA: High

Description

OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
opencats OpenCATS 0

References & Advisories (6)

Bug Bounty Relevance

85 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

32.98%
Raw Score 0.329750
Percentile 98.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.32975
2026-11-12
0.32975
2026-11-10
0.32975
2026-11-09
0.32975
2026-11-08
0.32975

Intelligence Sources

mitre ref →

External Links