CVE-2023-30261

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jun 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-302628.8An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticateCVE-2023-302649.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.CVE-2023-302656.5CLTPHP <=6.0 is vulnerable to Directory Traversal.CVE-2023-302668.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.CVE-2023-302676.1CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.CVE-2023-302689.8CLTPHP <=6.0 is vulnerable to Improper Input Validation.CVE-2023-302698.1CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.CVE-2023-30277.8The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtaiCVE-2023-30289.8Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fCVE-2023-302809.8Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute aCVE-2023-302816.5Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store CommCVE-2023-302827.5PrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of permissions' control, a guest can access e
CVE-2023-30261: Critical severity, CVSS 9.8 | Vulnix