CVE Watch9 de jul. de 2026

CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information

CVSS

9.8

Crítica

EPSS

27.5%

p98

KEV

—

Exploit Today

0-100

Publicado: 23 de jan. de 2024 · Última mod.: 9 de jul. de 2026 · CWE-94

EPSS · 30d

27.5%EPSS · 30 dias27.5%

2026-10-122026-11-10

Descrição técnica

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1242257.8 ALT

—

——0Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.3h CVE-2026-1233955.9 MÉD

—

——0Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.3h CVE-2026-1229798.1 ALT

—

——0Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.3h CVE-2026-1207827.8 ALT

—

——0Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.3h CVE-2026-1207799.6 CRÍ

—

——0Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.3h CVE-2026-1199047.8 ALT

—

——0Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.3h