CVE-2026-50872 - An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request

Back Back to CVE browser

CRITICAL

An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request

Published Jun 15, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.85%

Description

An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36770		Advisory
https://gist.github.com/pyuysig/272bf96c028ed45ad010b7c75937c914		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 15, 2026

Updated Jun 16, 2026

Reserved Jun 7, 2026

Link CVE-2026-50872

CISA Vulnrichment

Updated Jun 16, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-50872

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-50872

ENISA EUVD

Assigner mitre

Published Jun 15, 2026

Updated Jun 16, 2026

Exploited since n/a

Link EUVD-2026-36770

EUVD-2026-36770